Penetration Testing mailing list archives

Re: [PEN-TEST] Web Site Snarf


From: Desmond Irvine <desmond.irvine () SHERIDANC ON CA>
Date: Tue, 17 Oct 2000 12:20:23 -0400

There are lots of tools available to grab the contents of a web site,
but none of them are going to get you anything but what you can see with
view source.  Sure they'll do a nice traversal of the web site and grab
all the pages, images, etc., but they can't get anything that is
processed on the server side before being presented to the client.
You'll be able to evaluate form submissions and the like, but that's as
far as you'll get.

"Adams, MarkRobert" wrote:

Is there a way to basically dump an entire web site, even if there are Java
Scripts running?  I've tried Teleport Pro, but I was unable to do it.  What
I need to do is duplicate a web site, including the directory structure, so
I can look for vulns.  The problem is that there are Java scripts which get
in the way.  Anyone know of a tool which gets around this?

Mark Adams
KPMG LLP
mradams () kpmg com


Current thread: