help with cgi-bin directories

[raymo39]

/cgi-bin/ directories are always forbidden access without certain privs.
has anyone got any tips on getting into the directory?
iv heard of a /opt/local/etc/httpd/ directory that exists with some servers
and other smaller ones carry a httpd.conf file but i cant access these either, any ideas are much appreciated

[int3grate]

Depending on the administrators skill, and how the permissions on directories are set (and if DirectoryIndex is turned on in apache config) will determine what you can see in certain web directories. One of the best tools for auditing web security (other than manual analysis) is Nikto. Nikto will scan a web server and list any known exploits, and interesting directories or paths it can find on a website. It's a simple perl script that you can run on a Linux machine. Check it out here: http://www.cirt.net/nikto2