Generic Way to Scan Webservers for a Particular URI Path #759
Description
➹ New Feature implementation request
Is your feature request related to a problem?
- As a secureCodeBox user I can define a scan, so that HTTP services will be probed for a given URI and HTTP method.
Example:
If a scanner finds an IIS HTTPd, then perform a subsequent scan to probe if GET /certsrv responds w/ 200 OK.
Additional context
We encountered the need for this feature to find machines vulnerable for Petit Potam. But instead of implementing a particular scan for Petit Potam it may make sense to have a generic way to scan for certain URIs.