Penetration Testing mailing list archives
Re: Directory listing
From: "Volker Tanger" <volker.tanger () discon de>
Date: Fri, 9 May 2003 08:54:17 +0200
Greetings! On Mon, 5 May 2003 11:32:09 -0700 (PDT) John Madden <chiwawa999 () yahoo com> wrote:
In IIS/4 or 5 you can use the cmd.exe?/c+dir to get the directory of a machine how can the same be accomplish on other types of web server like Apache ? Can this be accomplished with a cgi or perl script ?
No problem. Here you are - as CGI:
#!/bin/sh
echo "Content-type: text/plain\n\n"
/bin/ls -l
Using Apache's indexing module would a yield nicer (and clickable)
index, though...
Bye
Volker Tanger
IT-Security
discon gmbh
DeTeWe AG & Co. KG
Fon +49 30 6104-3307
Fax +49 30 6104-3435
http://www.detewe.de/
--
-------------------------------------------------------------------
Besuchen Sie unsere neuen Internet-Seiten http://www.detewe.de .
Neues Highlight: Wunschproduktberater fuer den Home & Office-Bereich.
Visit our new Internet Pages on http://www.detewe.de .
Our Highlight: Online Product Adviser for Home & Office.
(Currently available in German only)
---------------------------------------------------------------------------
Did you know that you have VNC running on your network?
Your hacker does.
Plug your security holes.
Download a free 15-day trial of VAM:
http://www.securityfocus.com/StillSecure-pen-test
----------------------------------------------------------------------------
Current thread:
- Directory listing John Madden (May 08)
- Re: Directory listing Volker Tanger (May 09)
- <Possible follow-ups>
- RE: Directory listing Maher Odeh (May 11)
