logo       

Re: Website "Scanner": msg#00034

security.vulnerabilities

Subject: Re: Website "Scanner"

At 03:22 PM 1/8/2003 -0800, backed.up.by.2048.bit.encryption@xxxxxxxxxxxx wrote:
We want to find out what else might be in "new_products" so we plug in say the words "big" "winner" "2003" and let our dictionary spin:

biggerwinner2003.html - nothing
bigloser2002.html - hit

etc.

I know I'm stating the obvious, but keep in mind that the log files on the destination box (or on any firewalls that are set to log) are going to be at least 5 or 6 times the size of your dictionary file, even more if you use combinations of words like you talk about. Any substantial poking and prodding and you could fill up a partition or otherwise become obvious real quick. Webtrends and the like will also flag you.

Don't forget these too:

"Copy%20of%20bigwinner2003.html"
"bigwinner2003.bak"
"bigwinner2003.old"
"bigwinner2003.tmp"

etc...

-Mike




<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise