WebApp Sec mailing list archives

Fierce domain scan released


From: RSnake <rsnake () shocking com>
Date: Sun, 31 Dec 2006 17:42:25 -0800 (PST)


Hello fellow web app sec folks!  I just released a new beta domain
scanner to do initial discover (before the nmap/unicornscan/nessus
scans).  It primarily uses DNS to guess and traverse through IP
addresses using forward and reverse lookups.  Once it finds hostnames it
traverses to find more, and therefore can uncover large groups of
hostnames as well as non-contiguous blocks of IP space used by the
target and it's partners.  Fierce is written in perl (now you guys get
to see what a shoddy programmer I really am):

http://ha.ckers.org/fierce/

Details are on the site.  It's beta, so forgive bugs, but I'd appreciate
questions/comments as I get it into a better state.

-RSnake
http://ha.ckers.org/
http://sla.ckers.org/

-------------------------------------------------------------------------
Sponsored by: Watchfire

Today's hackers exploit web applications to expose, embarrass and even steal. Firewalls and SSL may be commonplace but recent studies indicate 3 out of 4 websites remain vulnerable to attack. Watchfire's "Addressing Challenges in Application Security" whitepaper, explains what to do and provides a guideline to improving your own application security. Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008YTU
--------------------------------------------------------------------------


Current thread: