Nonde Scripts

Wumpus Documentation

This is an online version of the readme.txt file included in the download.

Installation

There are two ways to run Wumpus on your server - as error doc or as index doc.

Error doc means that the Wumpus script will replace the default HTTP 403.14 error page (Directory Listing Denied) and will present a fancy dir listing instead. This, however, requires you to be able to set custom error documents on your server. If you own the box then it's not a problem. If you're on a hosting solution, you might be out of luck.

This is where "index doc" mode comes into play. This uses a more traditional approach - creating a special index document in each directory-to-be-listed. With Wumpus, that index document merely #includes the Wumpus main file.
This method is a bit more cumbersome as you'll have to manage dummy index documents in each directory.

- "Error doc" mode

Step 1. Upload the Wumpus folder to your server. It doesn't have to be inside the web root.
Step 1a. If you placed Wumpus outside the web root, create a new Virtual Directory in IISAdmin and point it to your Wumpus folder.

Step 2. Open the config.asp file in a text editor.
Step 2a. Set the value of sDomain to your domain, including the http:// part.
Step 2b. Set the value of sInstDir to the virtual path to your Wumpus folder (sans domain).
Step 2c. Set the value of sRunMode to "error".

Step 3. In IISAdmin, navigate to the folder in which you wish to use Wumpus. Right-click on it and choose Properties.
Step 3a. In the first tab - 'Directory' or 'Virtual Directory' - disable directory browsing. Otherwise you'll simply get the IIS default directory listing.
Step 3b. In the 'Custom Errors' tab select the 403.14 error and click on Edit. Change the message type to URL and the URL to the virtual path to Wumpus. For example, /Wumpus/index.asp
Click OK twice.

That's it! Repeat step 3 for any other folder where you wish to use Wumpus for directory listing.

- "Index doc" mode

Step 3. In each directory where you wish to use Wumpus, create a new text file and name it default.asp.
Copy the following line of code into that file:

Change the path so it matches that of Wumpus.

That's it!

Additional configuration

You can perform additional configuration - like enabling .NET thumbnails, hiding system files etc. - in the config.asp file. Just open it in your favourite text editor.

Troubleshooting

You get an error message saying "Subscript out of range"

This happens when you've created a dummy index document that #includes the Wumpus main file (as should be done in index doc mode), but Wumpus is configured to run in error doc mode. To fix this, either remove the dummy index doc, or set Wumpus to run in index doc mode (see instructions above on how to do that).

If you experience any problems that haven't been described above, or have any questions, do not hesitate to contact me.