At 3/12/2002 01:41 AM, helmut schmidt wrote: >Does anyone have opinions on which are the best tools/scripts are >available to test for the existence of hidden (or non-referenced) web >directories and web pages. > >For example finding a directory http://www.xxx.com/admin >and hidden web page http://www.xxx.com/admin/admin.asp etc The whisker tool (v1.4) from Rain Forest Puppy has a fairly extensive list of directories for which it scans. Download the package from http://www.wiretrip.net/rfp/p/doc.asp/i2/d21.htm and take a look at the scan.db file. Michael Katz mikeat_private Procinct Security ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
This archive was generated by hypermail 2b30 : Fri Mar 15 2002 - 10:32:27 PST