Penetration Testing mailing list archives
Re: Scanner for old files (.bak, ~, .old, etc.)
From: Sandro Gauci <sandro () enablesecurity com>
Date: Tue, 30 Jun 2009 17:23:13 +0200
I guess this is a feature of many web application vulnerability scanners (not Nikto but the XSS/SQLi etc type). I've used Acunetix's WVS and it does exactly what you describe. - sandro w: http://enablesecurity.com/ On Tue, Jun 30, 2009 at 2:47 PM, Juan Kinunt<kinunt () gmail com> wrote:
Hi, I would like to know if anyone knows a tool that first spiders the web in order to enumerate al files and scripts it detects and then look for this same files but with another extension. For example, first spiders the web and enumerate: index.php news.php cart.php And then looks for index.php.bak, index.php.inc, index.php~, index.bak, index.old, etc. This tool will be useful supossing that programmers tend to change the extension of the file to store old files. I know Nikto, Wikto, etc... but this tools look for predefined files and I would like to target already existing files but with different extension. If the tool does not exist I'll try to code something. Thanks. ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Scanner for old files (.bak, ~, .old, etc.) Juan Kinunt (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) Andres Riancho (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) Benjamin Greenfield (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) Gabriele Zanoni (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) Sandro Gauci (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) John Lampe (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) rajat swarup (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) Rogan Dawes (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) pUm (Jun 30)
- Re: Scanner for old files (.bak, ~, .old, etc.) Todd Haverkos (Jun 30)
- <Possible follow-ups>
- Re: Scanner for old files (.bak, ~, .old, etc.) jason_jones98 (Jun 30)