1. This forum is in read-only mode.

Finding Subdirectories On A Website

Discussion in 'Computers & Modding' started by cactusjack901, Nov 22, 2008.

  1. cactusjack901

    cactusjack901 Member

    Does anybody know a way for me to crawl through a website, and find every subdirectory and every page, on said website. I'm not looking to do anything malicious, it's part of a project a few friends and I are working on, and I just have to do some information recovery (it's an internet scavenger hunt of sorts).

    On the same note (same project even), does anybody know any way to grant myself admin privileges on a phpbb message board that reads 'Powered by phpBB and Ad-Infinitum 1.06. Protected by Anti-Spam ACP' at the bottom?


    EDIT: and sorry to be a bother about all this
     
  2. Seph

    Seph Administrator Staff Member

    Good luck on the first, all you can base it on are the URLs and if you encounter some nice URLs such as /NDS/5/ then that doesn't mean there's a NDS and a 5 dir. So impossible.

    The second question will not be answered here because it's considered hacking and we really don't condone that.
     
  3. cactusjack901

    cactusjack901 Member

    as far as the first one goes, alright, I get what you mean, but it wouldn't even be possible to see first level sub directories, or even bypass the index.html and see the dir listing?

    and the second one. I can understand the inherent problem with that, some people aren't exactly upstanding and would use that sort of knowledge to seriously fuck someone's shit up (I've been on the receiving end of that, someone got into my brother's computer, from there, into his server, and then into my compuer, and then into JP Morgan Chase (did I mention my brother's job at the time was to prevent people from getting into Verizon Wireless's systems, so either this dude was really good, or my brother got lax with his home security), and the end result there was the United States Secret Service got his house and my house with simultaneous raids)
     
  4. Loonylion

    Loonylion Administrator Staff Member

    directory listing must be enabled on the server, generally that is considered bad practice and a security risk so it won't be.

    On a basic HTML website, each / probably preceeds a directory name, but as Seph said, it's not guaranteed, and on a large/dynamic site then the chances are its for url rewriting, in which case they aren't directory names at all. RomUlation uses URL re-writing.