ISTS
-
2010-02-24
- priority: 5 --> 7
When using Dirbuster on a site that has a specific scope of engagement that limits testing to the directory specified and below.
Such as http://test_site.com/must_start_here/
Dirbuster will still move up the tree to http://test_site.com/ even if the specific path is specified in either the target URL or the 'Dir to start with' field.
This issue could cause testing to be out with the scope of engagement and lead to problems with the site owners. If a specific URL or start directory is provided then this should be enforced by the tool.