Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: Re: Website "Scanner"

Re: Website "Scanner"

From: Martin Eiszner <martin_at_websec.org>
Date: Fri, 10 Jan 2003 08:23:32 +0100

hola,

On Thu, 09 Jan 2003 13:57:14 +0100
Javier Fernandez-Sanguino <jfernandez_at_germinus.com> wrote:

---*---

> the number of requests you are going to make are quite high (and
> increase exponentially). Maybe it would be better to try to first index
> the site (spider like), and then attempt to retrieve "mutated"
> filenames. For example, if you see index.html try: index.html.old,
> index.html.bak...

---*---

you can find a nice and flexible extension-brute-forcer here:

http://www.websec.org/tools/extensions_pl.html

with a simple config-file here:

http://www.websec.org/tools/extensions.txt

nice day,

MeI

-- 
WebSec.org / Martin Eiszner
Gurkgasse 49/Top14
1140 Vienna
Austria / EUROPE
mei_at_websec.org
http://www.websec.org
tel: 0043 699 121772 37
Received on Jan 11 2003
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos