> I am wanting to write a nasl module that compares cgi-bin contents to an > index of cgi files that should be there. If any other executables are there > that are not in the index, I would like it to alert me of this. > > Is this at all possible? shure... > > I know you can check for specific files in the cgi-bin, but can you compare > the directory contents to an index? >
first question, why do you allow index of cgi-bin directory? > Thx for any insite. _IF_ you allow index if cgi-bin directory, a good-ole GET / should give you all the data you want, just save off a 'good' one, use egrep to strop off dates/ (maybe you want to keep?) and compare questin again why you allow indexing of cgi-bin directory. > > Troy -- Michael Scheidell SECNAP Network Security, LLC (561) 368-9561 [EMAIL PROTECTED] http://www.secnap.net/
