![]() |
webscanner.sourceforge.net | June 30, 2025 |
About Author Download Example FAQ Related Info Usage |
Current Page |
Description: | Web Scanner is a Perl or Java based command line tool to scan web server for known web pages to look for potentialy vulnerable web content. The scan options allow users to scan both HTTP and HTTPS web server on their default ports (80 and 443, only). Also Web scanner can return the size (-z) of the response from the GET command. This can allow users to determine if a webpage is there even when the web server administrator uses defined pages for 404 found pages. | |
Version 1.3 Usage: |
./webscanner.pl -h hostname [-c checkfile] [-s] [-v] -h specify host to scan -c specify checklist file to use -o specify an output file -s use https instead of http -v verbose mode print 404 messages -z prints out length of 200 messages -d specify a delay time Version: 1.3 | |
Version 2.0 Usage: |
java WebScanner -h hostname [-c checkfile] [-s] [-v] -h specify host to scan -c specify checklist file to use -o specify an output file -s use https instead of http -v verbose mode print 404 messages -z prints out length of 200 messages -d specify a delay time Version: 2.0 | |
Example: |
$ /usr/local/bin/webscanner.pl -h 192.168.1.10 Scanning http://192.168.1.10/ with /usr/local/lib/webscanner/checks.dat Server Info: HTTP/1.1 200 OK Connection: close Date: Tue, 01 Jul 2003 17:40:20 GMT Accept-Ranges: bytes ETag: "5e506-99-3ce188ab" Server: Apache/1.3.23 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6c Content-Length: 153 Content-Type: text/html Last-Modified: Tue, 14 May 2002 21:59:07 GMT Client-Date: Tue, 01 Jul 2003 17:40:21 GMT Client-Response-Num: 1 Checking... http://192.168.1.10/ - 200 - Found file http://192.168.1.10/./.. - 400 - Bad Request http://192.168.1.10/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/boot.ini - 400 - Bad Request http://192.168.1.10/admin/ - 401 - Authorization Required http://192.168.1.10/admin/accounts.asp - 401 - Authorization Required http://192.168.1.10/admin/add_category.asp - 401 - Authorization Required http://192.168.1.10/../../../../../../../../boot.ini - 400 - Bad Request http://192.168.1.10/.html/............../config.sys - 403 - Permission Denied http://192.168.1.10/.htpasswd - 403 - Permission Denied http://192.168.1.10/images - 403 - Permission Denied http://192.168.1.10/images/ - 403 - Permission Denied http://192.168.1.10/images/../../../mssql/customer.database - 400 - Bad Request http://192.168.1.10/index.html - 200 - Found file http://192.168.1.10/index.php - 200 - Found file http://192.168.1.10/manual/ - 200 - Found file http://192.168.1.10/?PageServices - 200 - Found file http://192.168.1.10/../../passwd - 400 - Bad Request http://192.168.1.10/protected/ - 401 - Authorization Required http://192.168.1.10/~root - 403 - Permission Denied http://192.168.1.10/~root/etc/passwd - 403 - Permission Denied http://192.168.1.10/scripts/../../cmd.exe - 400 - Bad Request http://192.168.1.10/scripts/../../cmd.exe/?%2FC+any_command - 400 - Bad Request http://192.168.1.10/scripts/../../cmd.exe?%2FC+echo+\"hacked!\">c:\\hello.bat - 400 - Bad Request http://192.168.1.10/scripts/../../cmd.exe/?%2FC+echo+"hello,+World" - 400 - Bad Request http://192.168.1.10/../../shadow - 400 - Bad Request http://192.168.1.10/stats - 200 - Found file http://192.168.1.10/stats/ - 200 - Found file http://192.168.1.10/test/ - 403 - Permission Denied http://192.168.1.10/../../../../../winnt/repair/sam._ - 400 - Bad Request http://192.168.1.10/../../winnt/win.ini - 400 - Bad Request Summary Total Checks: 1423 Return Code 200: 16 Hits Return Code 401: 20 Hits Return Code 403: 9 Hits Return Code 404: 1353 Hits Return Code Other: 0 Hits | |
Download | Download from Sourceforge.net | |
Requried Packages | This program requries the following perl modules to be installed: Crypt-SSLeay-0.25 URI-1.12 Digest-MD5-2.13 HTML-Parser 3.25 libwww-perl 5.53 MIME-Base64-2.12 openssl-0.9.6 (requried for HTTPS connection attempts) | |
Author | Jeremiah Sahlberg [jjds@users.sourceforge.net] |