Penetration Testing mailing list archives

Re: Directory listing


From: "Volker Tanger" <volker.tanger () discon de>
Date: Fri, 9 May 2003 08:54:17 +0200

Greetings!

On Mon, 5 May 2003 11:32:09 -0700 (PDT) John Madden
<chiwawa999 () yahoo com> wrote:

In IIS/4 or 5 you can use the cmd.exe?/c+dir to get
the directory of a machine how can the same be
accomplish on other types of web server like Apache ?
Can this be accomplished with a cgi or perl script ?

No problem. Here you are - as CGI:

        #!/bin/sh
        echo "Content-type: text/plain\n\n"
        /bin/ls -l

Using Apache's indexing module would a yield nicer (and clickable)
index, though...

Bye

Volker Tanger

IT-Security
discon gmbh
DeTeWe AG & Co. KG

Fon +49 30 6104-3307
Fax +49 30 6104-3435
http://www.detewe.de/

-- 


-------------------------------------------------------------------
Besuchen Sie unsere neuen Internet-Seiten http://www.detewe.de .
Neues Highlight: Wunschproduktberater fuer den Home & Office-Bereich.

Visit our new Internet Pages on http://www.detewe.de .
Our Highlight: Online Product Adviser for Home & Office.
(Currently available in German only)


---------------------------------------------------------------------------
Did you know that you have VNC running on your network?
Your hacker does.
Plug your security holes.
Download a free 15-day trial of VAM:
http://www.securityfocus.com/StillSecure-pen-test
----------------------------------------------------------------------------


Current thread: