dirtrav

#For Directory Traversal
#websphinx

#!/bin/sh
#getit.sh script
if [ -z $1 ]; then
echo -e "\n\tUsage: $0 <host> <URL>"
exit
fi
echo -e "GET $2 HTTP/1.0\n\n" | \
nc -vv $1 80



Now you’re working on the command line with HTTP and HTTPS. The web
applications are going to fall! So, instead of saving every file from your browser or
running lynx, use the getit scripts shown previously, as illustrated in this example:
[root@meddle ]# mkdir www.victim.com
[root@meddle ]# cd www.victim.com
[root@meddle www.victim.com]# getit.sh www.victim.com /index.html >
index.html
www.victim.com [192.168.33.101] 80 (http) open
sent 27, rcvd 2683: NOTSOCK
[root@meddle www.victim.com ]# mkdir secure
[root@meddle www.victim.com ]# cd secure
[root@meddle secure]# sgetit.sh www.victim.com /secure/admin.html >
admin.html