|
| 1 | +## Description |
| 2 | + |
| 3 | +This module identifies the existence of interesting files in a given directory path. |
| 4 | + |
| 5 | +## Verification Steps |
| 6 | + |
| 7 | +1. Do: ```use auxiliary/scanner/http/files_dir``` |
| 8 | +2. Do: ```set RHOSTS [IP]``` |
| 9 | +3. Do: ```set RPORT [PORT]``` |
| 10 | +4. Do: ```run``` |
| 11 | + |
| 12 | +## Scenarios |
| 13 | + |
| 14 | +**Running the scanner** |
| 15 | + |
| 16 | +``` |
| 17 | +msf > use auxiliary/scanner/http/files_dir |
| 18 | +msf auxiliary(files_dir) > show options |
| 19 | +
|
| 20 | +Module options (auxiliary/scanner/http/files_dir): |
| 21 | +
|
| 22 | + Name Current Setting Required Description |
| 23 | + ---- --------------- -------- ----------- |
| 24 | + DICTIONARY /root/Framework/msf/metasploit-framework/data/wmap/wmap_files.txt no Path of word dictionary to use |
| 25 | + EXT no Append file extension to use |
| 26 | + PATH / yes The path to identify files |
| 27 | + Proxies no A proxy chain of format type:host:port[,type:host:port][...] |
| 28 | + RHOSTS yes The target address range or CIDR identifier |
| 29 | + RPORT 80 yes The target port (TCP) |
| 30 | + SSL false no Negotiate SSL/TLS for outgoing connections |
| 31 | + THREADS 1 yes The number of concurrent threads |
| 32 | + VHOST no HTTP server virtual host |
| 33 | +
|
| 34 | +msf auxiliary(files_dir) > set RHOSTS 192.168.0.155 |
| 35 | +RHOSTS => 192.168.0.155 |
| 36 | +msf auxiliary(files_dir) > run |
| 37 | +
|
| 38 | +[*] Using code '404' as not found for files with extension .null |
| 39 | +[*] Using code '404' as not found for files with extension .backup |
| 40 | +[*] Using code '404' as not found for files with extension .bak |
| 41 | +[*] Using code '404' as not found for files with extension .c |
| 42 | +[*] Using code '404' as not found for files with extension .cfg |
| 43 | +[*] Using code '404' as not found for files with extension .class |
| 44 | +[*] Using code '404' as not found for files with extension .copy |
| 45 | +[*] Using code '404' as not found for files with extension .conf |
| 46 | +[*] Using code '404' as not found for files with extension .exe |
| 47 | +[*] Using code '404' as not found for files with extension .html |
| 48 | +[*] Found http://192.168.0.155:80/index.html 200 |
| 49 | +[*] Using code '404' as not found for files with extension .htm |
| 50 | +[*] Using code '404' as not found for files with extension .ini |
| 51 | +[*] Using code '404' as not found for files with extension .log |
| 52 | +[*] Using code '404' as not found for files with extension .old |
| 53 | +[*] Using code '404' as not found for files with extension .orig |
| 54 | +[*] Using code '404' as not found for files with extension .php |
| 55 | +[*] Using code '404' as not found for files with extension .tar |
| 56 | +[*] Using code '404' as not found for files with extension .tar.gz |
| 57 | +[*] Using code '404' as not found for files with extension .tgz |
| 58 | +[*] Using code '404' as not found for files with extension .tmp |
| 59 | +[*] Using code '404' as not found for files with extension .temp |
| 60 | +[*] Using code '404' as not found for files with extension .txt |
| 61 | +[*] Using code '404' as not found for files with extension .zip |
| 62 | +[*] Using code '404' as not found for files with extension ~ |
| 63 | +[*] Using code '404' as not found for files with extension |
| 64 | +[*] Found http://192.168.0.155:80/blog 301 |
| 65 | +[*] Found http://192.168.0.155:80/index 200 |
| 66 | +[*] Using code '404' as not found for files with extension |
| 67 | +[*] Found http://192.168.0.155:80/blog 301 |
| 68 | +[*] Found http://192.168.0.155:80/index 200 |
| 69 | +[*] Scanned 1 of 1 hosts (100% complete) |
| 70 | +[*] Auxiliary module execution completed |
| 71 | +msf auxiliary(files_dir) > |
| 72 | +``` |
0 commit comments