search

hiliujunyi / skipfish

Automatically exported from code.google.com/p/skipfish
Apache License 2.0
0 stars 0 forks source link

How to specify path location to scan #123

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Hello,

When I specify web location to scan, for example 
'http://172.19.20.22/settingUserInformation/AddData'.  
But it seem Skipfish will scan overall of path ( http://172.19.20.22/ ). 
Can it scan only path directory that user specified to test by not access in 
all file of whole path 
and  keep login with username and password to access this specific path ? 

Please give advice to me.
Thank you in advance :)

Original issue reported on code.google.com by vithid...@gmail.com on 10 Jul 2011 at 2:45

GoogleCodeExporter commented 9 years ago 
Use the -I option to specify path.

Skipfish needs to understand the 404 responses of parent directories, etc, so 
it will still send a couple requests to other paths, but will not perform 
dictionary brute-force of not-in-scope locations.

By the way, that's explained in the documentation I believe...

Original comment by lcam...@gmail.com on 10 Jul 2011 at 7:05