Chip 2007 January, February, March & April/Chip-Cover-CD-2007-02.iso/Pakiet bezpieczenstwa/mini Pentoo LiveCD 2006.1/mpentoo-2006.1.iso/livecd.squashfs/usr/share/nikto/plugins/nikto_apacheusers.plugin

Text File | 2005-10-19 | 1.1 KB | 34 lines

#VERSION,1.02
#LASTMOD,05.23.2003
# (c) 2001-2005 cirt.net, All Rights Reserved
# Apache user enumeration

# This software is distributed under the terms of the GPL, which should have been received
# with a copy of this software in the "LICENSE.txt" file.

# this checks Apache user enumeration. Do this is a plugin so we can do a test of a bogus
# user to see if we're getting bad data or not. Thanks to Jericho for pointing out the FPs

# The original Nikto check looked like:
# check,apache,/,~root,"Forbidden",GET,"Enumeration of users is possible by requesting ~username (responds with Forbidden for real users, not found for non-existent users)."

sub nikto_apacheusers
{
 (my $RES , $CONTENT) = fetch("/~root","GET");

 if ($CONTENT =~ /forbidden/i) # good on "root"
  {
   (my $RES , $CONTENT) = fetch("/~abcdef993454","GET");

   $CONTENT=char_escape($CONTENT);
   if ($CONTENT !~ /forbidden/i) # Good, it gave an error instead of forbidden
    {
     $VULS++;
     nprint("+ /~root - Enumeration of users is possible by requesting ~username (responds with Forbidden for real users, not found for non-existent users) (GET).");
    }
  }

}

1;