Re: Finding non referenced web directories / pages

[Michael Katz <mike () procinct com>]

At 3/12/2002 01:41 AM, helmut schmidt wrote:

> Does anyone have opinions on which are the best tools/scripts are 
> available to test for the existence of hidden (or non-referenced) web 
> directories and web pages.
>
> For example finding a directory http://www.xxx.com/admin
> and hidden web page http://www.xxx.com/admin/admin.asp etc

The whisker tool (v1.4) from Rain Forest Puppy has a fairly extensive list 
of directories for which it scans.  Download the package from 
http://www.wiretrip.net/rfp/p/doc.asp/i2/d21.htm and take a look at the 
scan.db file.

Michael Katz
mike () procinct com
Procinct Security


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/