<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>HexEsec &#124; a pentester's view &#187; regex</title>
	<atom:link href="http://hexesec.wordpress.com/tag/regex/feed/" rel="self" type="application/rss+xml" />
	<link>http://hexesec.wordpress.com</link>
	<description>sudo apt-get install ... security?</description>
	<lastBuildDate>Wed, 16 Dec 2009 23:34:30 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<cloud domain='hexesec.wordpress.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://www.gravatar.com/blavatar/92201dabe8b4987549fde15513466bfb?s=96&#038;d=http://s.wordpress.com/i/buttonw-com.png</url>
		<title>HexEsec &#124; a pentester's view &#187; regex</title>
		<link>http://hexesec.wordpress.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://hexesec.wordpress.com/osd.xml" title="HexEsec | a pentester&#8217;s view" />
		<item>
		<title>webFileScanner.pl &#8211; simple file &amp; directory brute-force utility</title>
		<link>http://hexesec.wordpress.com/2008/09/01/webfilescannerpl-a-simple-file-directory-brute-force-utility/</link>
		<comments>http://hexesec.wordpress.com/2008/09/01/webfilescannerpl-a-simple-file-directory-brute-force-utility/#comments</comments>
		<pubDate>Mon, 01 Sep 2008 16:30:55 +0000</pubDate>
		<dc:creator>jcran</dc:creator>
				<category><![CDATA[attack]]></category>
		<category><![CDATA[pentest]]></category>
		<category><![CDATA[tool]]></category>
		<category><![CDATA[lwp]]></category>
		<category><![CDATA[perl]]></category>
		<category><![CDATA[regex]]></category>

		<guid isPermaLink="false">http://hexesec.wordpress.com/?p=56</guid>
		<description><![CDATA[Here&#8217;s a simple utility i coded up using perl + lwp to blindly request files from a webserver + print the status code that&#8217;s returned. Functionally, it&#8217;s similar to the excellent &#8216;Dirbuster,&#8217; but without the overhead of Java.
Usage:

jcran@marzban:~/toolkit-new/nix/brute-web$ ./webFileScanner.pl
Usage: ./webFileScanner.pl [ip or hostname] [file with urls] [https?])]

Example:

jcran@marzban:~/toolkit-new/nix/brute-web$ ./webFileScanner.pl http://0x0e.com ../../wordlist/directory-list-1.0.txt

Output:

jcran@marzban:~/toolkit-new/nix/brute-web$
...
url: http://0x0e.com/healthyliving - status: 404
url: http://0x0e.com/healthy_living [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=hexesec.wordpress.com&blog=4149787&post=56&subd=hexesec&ref=&feed=1" />]]></description>
			<content:encoded><![CDATA[<div class='snap_preview'><br /><p>Here&#8217;s a simple utility i coded up using perl + lwp to blindly request files from a webserver + print the status code that&#8217;s returned. Functionally, it&#8217;s similar to the excellent &#8216;<a href="http://www.owasp.org/index.php/Category:OWASP_DirBuster_Project">Dirbuster</a>,&#8217; but without the overhead of Java.</p>
<p>Usage:<br />
<code><br />
jcran@marzban:~/toolkit-new/nix/brute-web$ ./webFileScanner.pl<br />
Usage: ./webFileScanner.pl [ip or hostname] [file with urls] [https?])]<br />
</code></p>
<p>Example:<br />
<code><br />
jcran@marzban:~/toolkit-new/nix/brute-web$ ./webFileScanner.pl http://0x0e.com ../../wordlist/directory-list-1.0.txt<br />
</code></p>
<p>Output:<br />
<code><br />
jcran@marzban:~/toolkit-new/nix/brute-web$<br />
...<br />
url: http://0x0e.com/healthyliving - status: 404<br />
url: http://0x0e.com/healthy_living - status: 404<br />
url: http://0x0e.com/pl0p - status: 200<br />
url: http://0x0e.com/relationships - status: 404<br />
url: http://0x0e.com/his - status: 404<br />
url: http://0x0e.com/history - status: 404<br />
url: http://0x0e.com/ancient - status: 404<br />
url: http://0x0e.com/family - status: 404<br />
...<br />
</code></p>
<p>The output is grep-able &amp; LWP makes it quite simple to add additional features as needed. For instance, you could quickly instruct LWP to save &#8217;status: 200&#8242; pages to disk.</p>
<p>You can download the file <a href="http://www.0x0e.net/tools/webFileScanner.zip">here</a>.</p>
<img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/hexesec.wordpress.com/56/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/hexesec.wordpress.com/56/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/hexesec.wordpress.com/56/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/hexesec.wordpress.com/56/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/hexesec.wordpress.com/56/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/hexesec.wordpress.com/56/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/hexesec.wordpress.com/56/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/hexesec.wordpress.com/56/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/hexesec.wordpress.com/56/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/hexesec.wordpress.com/56/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/hexesec.wordpress.com/56/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/hexesec.wordpress.com/56/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=hexesec.wordpress.com&blog=4149787&post=56&subd=hexesec&ref=&feed=1" /></div>]]></content:encoded>
			<wfw:commentRss>http://hexesec.wordpress.com/2008/09/01/webfilescannerpl-a-simple-file-directory-brute-force-utility/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/a7ddf41647a2dd583835558cdf11b280?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jcran</media:title>
		</media:content>
	</item>
	</channel>
</rss>