DotDotPwn - The Directory Traversal Fuzzer
It is a very flexible intelligent fuzzer to discover traversal
directory vulnerabilities in software such as HTTP/FTP/TFTP servers,
Web platforms such as CMSs, ERPs, Blogs, etc.
It has a protocol-independent module to send the desired payload
to the host and port specified. On the other hand, it also could
be used in a scripting way using the STDOUT module.
It is written in Perl.
===> The following configuration options are available for dotdotpwn-3.0.2_2:
DOCS=on: Build and/or install documentation
NMAP=on: Enable OS detection feature (requires nmap)
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/dotdotpwn: Spell NMAP_RUN_DEPENDS correctly
While here
- Stop shouting NMAP_DESC
- Pet portclippy while here
- Clean up SHEBANG_FILES
- Fix LICENSE
- Install license via license framework
- Reformat pkg-descr
New port: security/dotdotpwn
DotDotPwn - The Directory Traversal Fuzzer
It's a very flexible intelligent
fuzzer to discover traversal directory
vulnerabilities in software such as HTTP/FTP/TFTP
servers, Web platforms such as CMSs,
ERPs, Blogs, etc.
Also, it has a protocol-independent
module to send the desired payload to
the host and port specified. On the
other hand, it also could be used in
a scripting way using the STDOUT module.
It's written in perl programming
language and can be run either under
*NIX or Windows platforms.
WWW: https://github.com/wireghoul/dotdotpwn
PR: 209323
Submitted by: Rihaz Jerrin <rihaz.jerrin@gmail.com>
