资 源 简 介
<-- remember to star or recommend web-sorrow (it helps alot)
Intro/About:
Web-Sorrow is a perl based tool for misconfiguration, version detection, enumeration, and server information scanning. It"s entirely focused on Enumeration and collecting Info on the target server. Web-Sorrow is a "safe to run" program, meaning it is not designed to be an exploit or perform any harmful attacks.
Is there a feature you want in Web-Sorrow? Is there something that sucks that i can unsuck? Tell me. I Listen! @flyinpoptartcat
Basic overview of capabilities:
Web Services:
a CMS and it"s version number, Social media widgets and buttons, Hosting provider, CMS plugins, and favicon fingerprints
Authentication areas:
logins, admin logins, email webapps
Bruteforce:
Subdomains, Files an
文 件 列 表
DB
Apache.db
CGI_Microsoft.fuzz.txt
CMS.db
directory-list-2.3-big.db
drupal_plugins.db
favicon.db
Frontpage.fuzz.txt
IIS.fuzz.txt
joomla_plugins.db
login.db
Oracle9i.fuzz.txt
raft-medium-directories.db
raft-medium-files.db
small-files-dirs-enum.db
small-tests.db
SubDomain.db
web-services.db
Weblogic.fuzz.txt
Websphere.fuzz.txt
wp_plugins.db
GPL.txt
hdt.pl
headerDump.pl
readme.txt
UPDATE_perl_modules(linux).sh
UPDATE_perl_modules(windows).bat
Web-Sorrow Mastery.rtf
Web-Sorrow_Logo.jpg
Wsorrow.pl