RE: Website "Scanner"

["Ian Griffiths" <ian.griffiths () liv-coll ac uk>]

What about some Perl arrays and trusty old wget?

-----Original Message-----
From: backed.up.by.2048.bit.encryption () hushmail com
[mailto:backed.up.by.2048.bit.encryption () hushmail com] 
Sent: 08 January 2003 23:22
To: sullo () cirt net
Cc: webappsec () securityfocus com; vuln-dev () securityfocus com
Subject: Re: Website "Scanner"


-----BEGIN PGP SIGNED MESSAGE-----


On Wed, 08 Jan 2003 14:21:16 -0800 sullo () cirt net wrote:

> 2) take all the files an mix them with all the directories from
> the scan
> database, so that:
>  /dir1/file1.html
>  /dir2/file2.html
>  /dir3/file3.html
> turns into requests for
>  /dir1/file1.html
>  /dir1/file2.html
>  /dir1/file3.html
>  /dir2/file1.html
>  /dir2/file2.html
>  /dir2/file3.html
>  /dir3/file1.html
>  /dir3/file2.html
>  /dir3/file3.html


Yes, this is more the idea.  We are not looking for vulns. or xploits,
rather trying to intelligently "guess" what else is in that directory.
Either through dictionary use or other use.