Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test for generic 200 catch-all responses in web/dir_enum #144

Open
postmodern opened this issue Jul 15, 2024 · 0 comments
Open

Test for generic 200 catch-all responses in web/dir_enum #144

postmodern opened this issue Jul 15, 2024 · 0 comments
Labels
dir-enum Directory enumeration enhancement New feature or request web/dir_enum

Comments

@postmodern
Copy link
Member

Some web servers will return a generic 200 response for every requested path. The web/dir_enum worker should first make a random request for a page that definitely won't exist (random alpha-numeric path). If it receives a valid 200 response, then all additional requests that return status 200 should compare their response bodies to the first catch-all response. This will help filter out catch-all web servers.

@postmodern postmodern added enhancement New feature or request dir-enum Directory enumeration web/dir_enum labels Jul 15, 2024
@postmodern postmodern changed the title Test for generic catch-all responses in web/dir_enum Test for generic 200 catch-all responses in web/dir_enum Jul 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dir-enum Directory enumeration enhancement New feature or request web/dir_enum
Projects
None yet
Development

No branches or pull requests

1 participant