RE: Website "Scanner"

Hi,

It would be fairly straight-forward to use a dictionary generator in conjunction with any of the mentioned cgi-scanners (e.g. nikto, whisker etc.) - or simply piped through netcat - to achieve your aim.

As others have mentioned, the key limiter will be the time involved to make so many requests to a server.

It would probably be more efficient to produce a list of 'likely' root names (e.g. index, default, login) and extensions (htm, html, asp, php etc.) and iterate through them based on selected or enumerated paths on the target.

Glyn.

> -----Original Message-----
Received on Wed Jan 8 18:45:54 2003