<a href="http://g.adspeed.net/ad.php?do=clk&zid=14678&wd=728&ht=90&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=14678&wd=728&ht=90&pair=as" alt="i" width="728" height="90"/></a>

Nmap Security Scanner

Docs
Security Lists

Full Disclosure

More
Security Tools

Packet crafters

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

edgeos

WebApp Sec: Re: How to list all the URLs on a web server

Re: How to list all the URLs on a web server

From: Rafael San Miguel Carrasco <smcsoc_at_yahoo.es>
Date: Sun, 09 Jan 2005 13:42:46 +0100

>Another option is XSS. If you have some XSS vulnerability, than what you
>would want to steal from other users are these filenames.
>
>

How would you do this? I think that might be possible only if links are
hardcoded in the webpage, as in the case of URL rewriting.

Greetings.

-------------------------------
Rafael San Miguel Carrasco
Consultor Técnico - Jefe de Proyecto
rafael.sanmiguel_at_dvc.es
+ 34 660 856 647
+ 34 902 464 546
Davinci Consulting - www.dvc.es
Oficina Madrid - Parque empresarial Alvento
Via de los Poblados 1 Edificio A 6ª planta
28033 Madrid
-------------------------------
Received on Jan 10 2005

This message: [ Message body ]
Next message: tie: "Re: How to list all the URLs on a web server"
Previous message: Paul Laudanski: "RE: Content monitorting in Application Security"
In reply to: Ofer Shezaf: "RE: How to list all the URLs on a web server"
Next in thread: tie: "Re: How to list all the URLs on a web server"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]