I have perhaps a fairly straightforward question about the tool dotdotpwn.
Firstly, it seems like an awesome tool for generating the beginning of a directory traversal string, and the fact that it detects the OS and tailors itself accordingly is great - the trouble I am having is trying to figure out what text string I should use if the server is a Windows server?
I get that "root" is a good string for Linux as it tests for /etc/passwd, but I am struggling to find a good string for windows. I tried a few different ones, and it seems to struggle with characters such as [ and ] that I seem to find in examples of a boot.ini file. Can I just use "boot" as the first line seems to be [boot loader]?
I'm not sure if I am missing something fundamental here, Cheers!