pen-test
[Top] [All Lists]

Re: Website detection

To: Pen-Test <pen-test@securityfocus.com>
Subject: Re: Website detection
From: "Campbell Murray" <electronichacker@googlemail.com>
Date: Wed, 21 Feb 2007 11:24:40 +0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=VLn10vwrN/SAoe1s0GBe84IKR48+5UTGyhlDclxONcH2mb3cuXbdfFhvUmFDaAWzxYP1uh1nlBjXWWgx3jsH8Qc1J1pl0gBEH5nHhU+mkGahT2r5pQRg7roANVG8Tl+38PnTvz80jmhD12Uj6lUTft24gf7O2bhacwa7zuCWwPs=
Domainkey-signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=o4m9Rn5Mbzm4BB/MGDUduA7hoiaULtMWs/EtgdWulHSCPN94CONgJcd9CEm8oIn4wv5qrAjcSOjwN+isTizWjjWkYsrcqyVy14Wp4WBTFVqQtcmmzmJD7UC9Ns/eeXqVfPA9VC6bh4NLX5HzVQ24hKkSaKA71aA4rA79v5G/DM8=
In-reply-to: <36c3dff90702210323o30a73a18waca918489af81e82@mail.gmail.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <5a4274b50702190208l76d97209wec4b527a9730ad8a@mail.gmail.com> <36c3dff90702210323o30a73a18waca918489af81e82@mail.gmail.com>
Resent-date: Wed, 21 Feb 2007 21:18:51 -0700 (MST)
Resent-from: pen-test-return-1078483590@securityfocus.com
Resent-message-id: <20070222041851.2EAC4144B2B@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
try Wikto

http://www.sensepost.com/

Campbell



On 19/02/07, 3 shool <3shool@gmail.com> wrote:
Hello Everyone,

We are doing a PT for one of our customers with 5 webservers. None of
these webservers have the website on the main url like
http://xxx.xxx.xxx.xxx but they have confirmed that they have critical
applications running on all the 5 web servers and for security
purposes they have moved the websites to something like
http://xxx.xxx.xxx.xxx/yyy.

Now manually I guess it will take years to identify the correct URL
having the critical website by using guessing techniques. I was
wondering if there is a tool that could try various popular and brute
force combinations to automatically guess the possible URLs.

I'm sure many of you would have wonderful ideas to address this
problem. Pls. enlighten.

THNX

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>