News - Main Page
Whitepapers
Tools and Download
Presentations

download

screenshots

IIS Directory Enumeration

change logs

usage

licence

summary

http-dir-enum

http-dir-enum is a tool for finding content that is not linked on a website. Its main use is for finding directories that exist on a server. Simply provide a dictionary file and a URL.

This tool is written in PERL and uses the LWP library.

Features include:

  • Automatic detection of which HTTP response code to ignore (normally 404, but can vary on some sites)
  • Support for bruteforcing Files and Directories
  • Can search for directories recursively
  • Proxy support
  • Support for HTTP Basic Authentication
  • Support for sending custom cookies
  • Save scan output in XML format
  • Command line (lack of GUI is a feature, not a bug)
  • Mutli-threading for extra speed
  • HTTP keep alive support for extra speed (can be turned off)

Check out the usage page for a full list of options. There are also lots of examples to get you started.

Last Updated : 28/03/2008 16:49:57


Related Applications

  • BSQL brute forcer V2Updated version of the Blind SQL Injection Brute Forcer from www.514.es. Works against PostgreSQL, MySQL, MSSQL and Oracle and supports custom SQL Queries.
  • BSQL HackerBSQL (Blind SQL) Hacker is an automated SQL Injection Framework / Tool designed to exploit SQL injection vulnerabilities virtually in any database.
  • enum4linuxA Linux alterntive to enum.exe for enumerating data from Windows and Samba hosts.
  • hoppyHTTP options prober and information disclosure scanner
  • ManySSLUse this perl script to enumerate SSL ciphers
  • vesslvessl is a bash script that uses openssl to get and verify the ssl certificate of a remote server