Bug 209323 - [new port]:security/dotdotpwn : fuzzer to discover traversal directory vulnerabilities
Summary: [new port]:security/dotdotpwn : fuzzer to discover traversal directory vulner...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Kurt Jaeger
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-05-06 09:10 UTC by Rihaz Jerrin
Modified: 2016-12-07 21:30 UTC (History)
1 user (show)

See Also:

Attachments
[new port]:security/dotdotpwn port file (5.37 KB, text/plain)
2016-05-06 09:10 UTC, Rihaz Jerrin 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Rihaz Jerrin 2016-05-06 09:10:18 UTC 
Created attachment 170039 [details]
[new port]:security/dotdotpwn port file

DotDotPwn - The Directory Traversal Fuzzer

It's a very flexible intelligent 
fuzzer to discover traversal directory 
vulnerabilities in software such as HTTP/FTP/TFTP 
servers, Web platforms such as CMSs, 
ERPs, Blogs, etc. 

Also, it has a protocol-independent 
module to send the desired payload to 
the host and port specified. On the 
other hand, it also could be used in 
a scripting way using the STDOUT module.

It's written in perl programming 
language and can be run either under 
*NIX or Windows platforms.

WWW:https://github.com/wireghoul/dotdotpwn
Comment 1 Kurt Jaeger freebsd_committer freebsd_triage 2016-12-07 21:29:39 UTC 
Committed (3.0.2), thanks!
Comment 2 commit-hook freebsd_committer freebsd_triage 2016-12-07 21:30:09 UTC 
A commit references this bug:

Author: pi
Date: Wed Dec  7 21:29:36 UTC 2016
New revision: 428087
URL: https://svnweb.freebsd.org/changeset/ports/428087

Log:
  New port: security/dotdotpwn

  DotDotPwn - The Directory Traversal Fuzzer

  It's a very flexible intelligent
  fuzzer to discover traversal directory
  vulnerabilities in software such as HTTP/FTP/TFTP
  servers, Web platforms such as CMSs,
  ERPs, Blogs, etc.

  Also, it has a protocol-independent
  module to send the desired payload to
  the host and port specified. On the
  other hand, it also could be used in
  a scripting way using the STDOUT module.

  It's written in perl programming
  language and can be run either under
  *NIX or Windows platforms.

  WWW: https://github.com/wireghoul/dotdotpwn

  PR:		209323
  Submitted by:	Rihaz Jerrin <rihaz.jerrin@gmail.com>

Changes:
  head/security/Makefile
  head/security/dotdotpwn/
  head/security/dotdotpwn/Makefile
  head/security/dotdotpwn/distinfo
  head/security/dotdotpwn/files/
  head/security/dotdotpwn/files/patch-DotDotPwn_HTTP.pm
  head/security/dotdotpwn/files/patch-DotDotPwn_HTTP__Url.pm
  head/security/dotdotpwn/pkg-descr
  head/security/dotdotpwn/pkg-plist