ports/security/dotdotpwn/files/patch-DotDotPwn_HTTP.pm
Kurt Jaeger 2736234346 New port: security/dotdotpwn
DotDotPwn - The Directory Traversal Fuzzer

It's a very flexible intelligent
fuzzer to discover traversal directory
vulnerabilities in software such as HTTP/FTP/TFTP
servers, Web platforms such as CMSs,
ERPs, Blogs, etc.

Also, it has a protocol-independent
module to send the desired payload to
the host and port specified. On the
other hand, it also could be used in
a scripting way using the STDOUT module.

It's written in perl programming
language and can be run either under
*NIX or Windows platforms.

WWW: https://github.com/wireghoul/dotdotpwn

PR:		209323
Submitted by:	Rihaz Jerrin <rihaz.jerrin@gmail.com>
2016-12-07 21:29:35 +00:00

11 lines
452 B
Perl

--- DotDotPwn/HTTP.pm.orig 2016-05-05 08:37:25 UTC
+++ DotDotPwn/HTTP.pm
@@ -21,7 +21,7 @@ sub FuzzHTTP{
my $foo = 0; # Used as an auxiliary variable in quiet mode (see below)
my $UserAgent;
- open(AGENTS, "DotDotPwn/User-Agents.txt") or die "[-] Cannot open User-Agents.txt file: $!";
+ open(AGENTS, "/usr/local/share/dotdotpwn/User-Agents.txt") or die "[-] Cannot open User-Agents.txt file: $!";
my @UserAgents = <AGENTS>;
close(AGENTS);