Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: listing directory structure within webserver root

Re: listing directory structure within webserver root

From: DokFLeed.Net <dokfleed_at_dokfleed.net>
Date: Wed, 1 Sep 2004 19:06:08 +0400

I don't think you can,
all of the softwares (that i knowof) use follow-link methods.
they have to get a starting page containing links to the next files.
thats why it can never list 403 pages.

DokFLeed,
Smoke Dope, Eat Soap, Fly Home in a Bubble

=========================
----- Original Message -----
From: "Jose Maria Lopez" <jkerouac_at_bgsec.com>
To: "Sasa Jusic" <Sasa.Jusic_at_FER.hr>
Cc: "Serg Belokamen" <serg_at_dodo.com.au>; <pen-test_at_securityfocus.com>
Sent: Wednesday, September 01, 2004 12:23 AM
Subject: RE: listing directory structure within webserver root

El lun, 30 de 08 de 2004 a las 11:36, Sasa Jusic escribió:
> You can also try the HTTrack tool (http://www.httrack.com/). It is free
> and available for Windows and Unix platforms.
>
>
> "It allows you to download a World Wide Web site from the Internet to a
> local directory, BUILDING RECURSIVELY ALL DIRECTORIES, getting HTML,
> images, and other files from the server to your computer. HTTrack
> arranges the original site's relative link-structure. Simply open a page
> of the "mirrored" website in your browser, and you can browse the site
> from link to link, as if you were viewing it online. HTTrack can also
> update an existing mirrored site, and resume interrupted downloads.
> HTTrack is fully configurable, and has an integrated help system.
>
>
> Cheers,
>
> Sasa.

It seems quite interesting, but my question is: can it do it's work
without knowing the starting URLs? I find it easy to mirror a site if
I know the starting URLs, but the real question is doing it without
knowing the starting URLs.

-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac_at_bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA
The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"
----------------------------------------------------------------------------
--
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
---
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------
Received on Sep 01 2004
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos