Exposed .ds_store

DSWalk

DS_Walk enumerates all possible files and directories on a web server where a .ds_store file can be publicly accessed and downloaded. The tool will traverse all directories until no further .ds_store files are found in subsequent directories.

GitHub - Keramas/DS_Walk: Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.GitHub

python ds_walk.py -u http://10.13.38.11/

[!] .ds_store file is present on the webserver.
[+] Enumerating directories based on .ds_server file:
----------------------------
[!] http://10.13.38.11//admin
[!] http://10.13.38.11//dev
[!] http://10.13.38.11//iisstart.htm
[!] http://10.13.38.11//Images
[!] http://10.13.38.11//JS
[!] http://10.13.38.11//META-INF
[!] http://10.13.38.11//New folder
[!] http://10.13.38.11//New folder (2)
[!] http://10.13.38.11//Plugins
[!] http://10.13.38.11//Templates
[!] http://10.13.38.11//Themes
[!] http://10.13.38.11//Uploads
[!] http://10.13.38.11//web.config
[!] http://10.13.38.11//Widgets
----------------------------
[!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1
[!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc
----------------------------
[!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/core
[!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/db
[!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/include
[!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/src
----------------------------
[!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/core
[!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/db
[!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/include
[!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/src
----------------------------
[!] http://10.13.38.11//Images/buttons
[!] http://10.13.38.11//Images/icons
[!] http://10.13.38.11//Images/iisstart.png
----------------------------
[!] http://10.13.38.11//JS/custom
----------------------------
[!] http://10.13.38.11//Themes/default
----------------------------
[!] http://10.13.38.11//Widgets/CalendarEvents
[!] http://10.13.38.11//Widgets/Framework
[!] http://10.13.38.11//Widgets/Menu
[!] http://10.13.38.11//Widgets/Notifications
----------------------------
[!] http://10.13.38.11//Widgets/Framework/Layouts
----------------------------
[!] http://10.13.38.11//Widgets/Framework/Layouts/custom
[!] http://10.13.38.11//Widgets/Framework/Layouts/default
----------------------------
[*] Finished traversing. No remaining .ds_store files present.
[*] Cleaning up .ds_store files saved to disk.

Last updated 1 year ago

[!] .ds_store file is present on the webserver. [+] Enumerating directories based on .ds_server file: ---------------------------- [!] http://10.13.38.11//admin [!] http://10.13.38.11//dev [!] http://10.13.38.11//iisstart.htm [!] http://10.13.38.11//Images [!] http://10.13.38.11//JS [!] http://10.13.38.11//META-INF [!] http://10.13.38.11//New folder [!] http://10.13.38.11//New folder (2) [!] http://10.13.38.11//Plugins [!] http://10.13.38.11//Templates [!] http://10.13.38.11//Themes [!] http://10.13.38.11//Uploads [!] http://10.13.38.11//web.config [!] http://10.13.38.11//Widgets ---------------------------- [!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1 [!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc ---------------------------- [!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/core [!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/db [!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/include [!] http://10.13.38.11//dev/304c0c90fbc6520610abbf378e2339d1/src ---------------------------- [!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/core [!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/db [!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/include [!] http://10.13.38.11//dev/dca66d38fd916317687e1390a420c3fc/src ---------------------------- [!] http://10.13.38.11//Images/buttons [!] http://10.13.38.11//Images/icons [!] http://10.13.38.11//Images/iisstart.png ---------------------------- [!] http://10.13.38.11//JS/custom ---------------------------- [!] http://10.13.38.11//Themes/default ---------------------------- [!] http://10.13.38.11//Widgets/CalendarEvents [!] http://10.13.38.11//Widgets/Framework [!] http://10.13.38.11//Widgets/Menu [!] http://10.13.38.11//Widgets/Notifications ---------------------------- [!] http://10.13.38.11//Widgets/Framework/Layouts ---------------------------- [!] http://10.13.38.11//Widgets/Framework/Layouts/custom [!] http://10.13.38.11//Widgets/Framework/Layouts/default ---------------------------- [*] Finished traversing. No remaining .ds_store files present. [*] Cleaning up .ds_store files saved to disk.