Re: [W3af-users] Filename bruteforce with mod_negotiation

List, On Wed, Jun 3, 2009 at 3:14 PM, Wayne Dawson wrote: > On Wednesday, June 03, 2009 10:06 AM, Matt Tesauro wrote > Andres Riancho wrote: >>> Stefano, >>> >>> On Tue, Jun 2, 2009 at 3:45 PM, Stefano Di Paola wrote: Hi Andres, good finding, but if you were subscribed to my blog

Re: [W3af-users] Filename bruteforce with mod_negotiation

On Wednesday, June 03, 2009 10:06 AM, Matt Tesauro wrote Andres Riancho wrote: >> Stefano, >> >> On Tue, Jun 2, 2009 at 3:45 PM, Stefano Di Paola wrote: >>> Hi Andres, >>> good finding, but if you were subscribed to my blog >>> http://www.wisec.it/sectou.php >>> you'd see that I wrote about it a

Re: [W3af-users] Filename bruteforce with mod_negotiation

Andres Riancho wrote: > Stefano, > > On Tue, Jun 2, 2009 at 3:45 PM, Stefano Di Paola wrote: >> Hi Andres, >> good finding, but if you were subscribed to my blog >> http://www.wisec.it/sectou.php >> you'd see that I wrote about it a couple of years ago: >> http://www.wisec.it/sectou.php?id=4698e

Re: [W3af-users] Filename bruteforce with mod_negotiation

and the list gets bigger http://www.hansenb.pdx.edu/DMKB/dict/tutorials/mime_typ.php On Tue, Jun 2, 2009 at 9:10 AM, Andres Riancho wrote: > List, > >    Yesterday I found out a new trick, and I would like to share it with you ;) > > HTTP Request > > > GET /backup HTTP/1.0 > Accept: foo

Re: [W3af-users] Filename bruteforce with mod_negotiation

Matt Tesauro wrote: > Andres Riancho wrote: >> Matt, >> >> On Tue, Jun 2, 2009 at 11:12 AM, Matt Tesauro wrote: >>> Andres Riancho wrote: [big snip] >> >>> Then if it is, try fun files like backup, etc. >> Yes, but I think that it's much more performant to try this with >> mod_negotiation. With m

Re: [W3af-users] Filename bruteforce with mod_negotiation

Stefano, On Tue, Jun 2, 2009 at 3:45 PM, Stefano Di Paola wrote: > Hi Andres, > good finding, but if you were subscribed to my blog > http://www.wisec.it/sectou.php >  you'd see that I wrote about it a couple of years ago: > http://www.wisec.it/sectou.php?id=4698ebdc59d15 hehe, nice! > Obviousl

Re: [W3af-users] Filename bruteforce with mod_negotiation

Hi Andres, good finding, but if you were subscribed to my blog http://www.wisec.it/sectou.php you'd see that I wrote about it a couple of years ago: http://www.wisec.it/sectou.php?id=4698ebdc59d15 Obviously I'm just kidding, every research is good research when you find it by yourself. BTW that f

Re: [W3af-users] Filename bruteforce with mod_negotiation

Andres Riancho wrote: > Matt, > > On Tue, Jun 2, 2009 at 11:12 AM, Matt Tesauro wrote: >> Andres Riancho wrote: >>> List, >>> >>> Yesterday I found out a new trick, and I would like to share it with >>> you ;) >>> >>> HTTP Request >>> >>> >>> GET /backup HTTP/1.0 >>> Accept: foobar

Re: [W3af-users] Filename bruteforce with mod_negotiation

Matt, On Tue, Jun 2, 2009 at 11:12 AM, Matt Tesauro wrote: > Andres Riancho wrote: >> List, >> >>     Yesterday I found out a new trick, and I would like to share it with you >> ;) >> >> HTTP Request >> >> >> GET /backup HTTP/1.0 >> Accept: foobar/xyz >> User-Agent: w3af >> Host: 192.16

Re: [W3af-users] Filename bruteforce with mod_negotiation

Andres Riancho wrote: > List, > > Yesterday I found out a new trick, and I would like to share it with you > ;) > > HTTP Request > > > GET /backup HTTP/1.0 > Accept: foobar/xyz > User-Agent: w3af > Host: 192.168.150.2 > Connection: Close > > HTTP Response > = > > HTTP/1.1

[W3af-users] Filename bruteforce with mod_negotiation

List, Yesterday I found out a new trick, and I would like to share it with you ;) HTTP Request GET /backup HTTP/1.0 Accept: foobar/xyz User-Agent: w3af Host: 192.168.150.2 Connection: Close HTTP Response = HTTP/1.1 406 Not Acceptable ... 406 Not Acceptable Not Acceptabl