Darknet - The Darkside » w3bfukk0r http://www.darknet.org.uk Ethical Hacking, Penetration Testing & Computer Security Thu, 18 Mar 2010 08:50:21 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 w3bfukk0r 0.2 Forced Browsing Tool Released http://www.darknet.org.uk/2006/11/w3bfukk0r-02-forced-browsing-tool-released/ http://www.darknet.org.uk/2006/11/w3bfukk0r-02-forced-browsing-tool-released/#comments Fri, 17 Nov 2006 16:58:53 +0000 Darknet http://www.darknet.org.uk/2006/11/w3bfukk0r-02-forced-browsing-tool-released/ w3bfukk0r is a forced browsing tool, it basically scans webservers (HTTP/HTTPS) for a directory by using HTTP HEAD command and brute force mechanism based on a word list. Features:

  • HTTP/HTTPS(SSL) support
  • Banner grabbing
  • User-Agent faking
  • Proxy support (HTTP/S)
  • Reports found and non-existend directories

Example output:

w3bfukk0r http://nion.modprobe.de
Starting w3bfukk0r 0.2
Scanning http://nion.modprobe.de/ with 76 words from words.txt

Found http://nion.modprobe.de/tmp/ (HTTP 200)
Found http://nion.modprobe.de/blog/ (HTTP 200)
Found http://nion.modprobe.de/img/ (HTTP 200)
Found http://nion.modprobe.de/setup/ (HTTP 200)

Found 4 directories.
Server runs: Apache/2.0.54 (Debian GNU/Linux) PHP/5.1.4-0.1~bpo2

Scan finished (5 seconds).

Note: Not all webservers are handling HTTP status codes correctly, so if the webserver doesn’t care about RFCs the report generated by w3bfukk0r may include false positives. Maybe we’ll find a good method to detect those false positives.

You can download w3bfukk0r 0.2 here:

w3bfukk0r-0.2.tar.gz

Post to Twitter Post to Delicious Post to Digg Post to Facebook Post to StumbleUpon

]]> http://www.darknet.org.uk/2006/11/w3bfukk0r-02-forced-browsing-tool-released/feed/ 2