{"id":3197,"date":"2011-10-11T17:04:09","date_gmt":"2011-10-11T16:04:09","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3197"},"modified":"2012-04-20T08:47:01","modified_gmt":"2012-04-20T07:47:01","slug":"file-disclosure-browser-tool-to-explore-ds_store-files","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2011\/10\/file-disclosure-browser-tool-to-explore-ds_store-files\/","title":{"rendered":"File Disclosure Browser &#8211; Tool To Explore .DS_Store Files"},"content":{"rendered":"<p>The File Disclosure Browser takes .DS_Store files found on websites and parses through them to find a list of all potential files in the directory. It can then either just display the URLs for the files or if you give it a proxy it can browse to the files itself.<\/p>\n<p>The author wrote it after reading the <a href=\"http:\/\/pauldotcom.com\/2011\/08\/dirbuster-to-burp-the-missing.html\">PDC blog post on passing <a href=\"https:\/\/www.darknet.org.uk\/2011\/11\/dirbuster-brute-force-directories-files-names\/\">DirBuster<\/a> through Burp<\/a> and figured doing the same thing for the contents of DS_Store files would be useful. He also plans to extend this to work with other disclosure files, including dwsync.xml files created by Dreamweaver and possibly some of the code repository files, cvs, svn, git etc.<\/p>\n<p><strong>Requirements<\/strong><\/p>\n<p>To run the app you need to install the CPAN module, you can do this by becoming root, entering the CPAN shell then asking it to do the install:<\/p>\n<pre># perl -MCPAN -e shell\r\ncpan[1]> install Mac::Finder::DSStore<\/pre>\n<p>You can download File Disclosure Browser v1.0 here:<\/p>\n<p><a href=\"http:\/\/www.digininja.org\/files\/fdb_1.0.tar.bz2\">fdb_1.0.tar.bz2<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/www.digininja.org\/projects\/fdb.php\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The File Disclosure Browser takes .DS_Store files found on websites and parses through them to find a list of all potential files in the directory. It can then either just display the URLs for the files or if you give it a proxy it can browse to the files itself. The author wrote it after [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[28,17,15],"tags":[5243,783],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3197"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3197"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3197\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3197"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3197"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}