Metasploit mailing list archives

dir_scanner module


From: alfonso caponi <alfonso.caponi () gmail com>
Date: Tue, 5 Oct 2010 09:20:30 +0200

Hi,

using dir_scanner module (svn version) during a pen-test I've noticed that
in some cases is different to make a GET with a "/" at the end.

For example, during a pen-test versus an IIS server (Microsoft-IIS/6.0 (
Powered by ASP.NET <http://asp.net/> )) requests for /document/ returns 404
and for /document returns 301 (and it can be visible to the users).

Could you add this check to the module?

Thank you very much,
AL
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: