Intellitamper: Indexing of Websites

Printable View

December 9th, 2004, 02:34 AM
MrLinus

Intellitamper: Indexing of Websites

One way that attackers can find out information about a site is how well they can index it and determine your directory structure. A tool like wget can be handy in this regard. Interestingly enough, one of my students ran across this tool: IntelliTamper. This Windows tool, while not worked on since 2002, seems relatively fast and even has options to allow you to access a site using cookie information. It may be a good way to determine exactly how much information you provide to an attacker.

I did cause it to crash once (as I've said elsewhere, I'm quite good at that) so it may have the occassional burp, but otherwise, it looks rather interesting as an information gathering tool.
December 9th, 2004, 04:09 AM
kurt_der_koenig

Actually I posted about this here.... lol jk ;) Anyways, thanks for the link. I will definately try this out tomorrow.
December 9th, 2004, 08:03 PM
rapier57

Hey, thanks, MsMittens. As always, you come up with some very cool things.

I ran this on my site and it just showed the opening page. I feel very relieved at this. I ran it on one of the other college's sites and it was going until it crashed. I'll be contacting that SA to have a chat.
December 9th, 2004, 08:47 PM
littlenick

great link thanks.

Quote:

Originally posted here by rapier57
Hey, thanks, MsMittens. As always, you come up with some very cool things.

I ran this on my site and it just showed the opening page. I feel very relieved at this. I ran it on one of the other college's sites and it was going until it crashed. I'll be contacting that SA to have a chat.

try port scanning your site then try different combinations like http://ursite.com:portnumberhere example http://yahoo.com:3333 you might find out some vulnerability in your site by default that softare only scans port 80 but if you specify a perticular port number it works too.i tried it on my site on port 8888 and it gave me some threating information.
December 9th, 2004, 08:50 PM
rapier57

We run port scanners on all our servers on a regular basis.
December 9th, 2004, 09:00 PM
littlenick

hey i crashed that too....lol.
rapier57 just try to do that search on any of onen ports like 8888 for tomcat or so on you might get a few alarming results i was shocked at what i just saw.Just see what information it gives out and how that information can be used by an attarcker.