Home

SauceWalk-0.2b Mike Antcliffe Logically Secure Ltd
www.geeksos.co.uk

This tool will allow you to populate your proxy (burp/acunetix/paros etc) with a full list of files and directories as found on your web server including all

includes etc.

The idea is that you either point it at a local copy of the given site or a remote php script (asp/jsp versions to follow) and it will enumerate all files

and folders. Once this action is complete it will make web requests to each file and folder via your given proxy.

This tool is especially handy when testing against common open source platforms (Joomla for example)

This tool was born out of the necessity to have full exposure of a remote site rather than just the files visible when using a traditional spider/crawler.

Usage

SauceWalk 0.2b : Mike Antcliffe - Logically Secure Ltd

Obtain a copy of the source (i.e. from the vendor site) and unpack it into a directory.
1, Launch proxy eg Burp/acunetix

2, run walk.exe from the commandline

3, follow the instructions!!

note: if you have access to the site you can use the remote agent to dynamically obtain a current list of files and folders.. simply upload saucewalk.php to

your server and when prompted enter the full URL including "k" parameter (asp/jsp versions to
follow) it is a good idea to change the key to something unique to you!!

if you experience issues please let me know via the comments section.

example:

http://www.mysitetobetested.com/saucewalk.php?k=13371337133713371337

Version 1.0 (multiplatform) to be released soon with full python source code provided soon

Project Members:

• Mike Antcliffe (admin)

[Mike Antcliffe]

Version 0.2b now released - Fixed PHP error