File extensions are used by web servers to
identify different type of files and then distribute these files in a specific
way depending on the type. For example, most web servers will force the user to
download an mp3 or exe file, while allowing the user to view an image or html
file in the browser. File extensions can
also give penetration testers information about the technologies used in the
web application. In other words,
depending on how the server handle certain file type requests, we can then find
some sever information. For example, if a PHP file ex executed, we know that
PHP has been installed on the server. If we used a certain PHP5 function, and
it fails the execute, we know that the server has an older version of PHP
installed.
We can check for
common used files and directories using vulnerability scanners such as Nessus
or Nikito Scanner. Other tools that can help us with this type
vulnerability are web
mirroring tools.
No comments:
Post a Comment