WAFPASS Analysing parameters with all payloads’ bypass methods, aiming at benchmarking security solutions like WAF. Today a great number of website owners around the globe use “Web Application Firewalls” to...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published November 26, 2018 · Last modified November 4, 2024
Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their...
hsecscan A security scanner for HTTP response headers. Installation Requirement: Python 2.x Usage Example Copyright (C) 2015 riramar Source: https://github.com/riramar/
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published June 24, 2017 · Last modified November 4, 2024
WebGoat WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended...
Web Exploitation / WebApp PenTest
by do son · Published June 14, 2017 · Last modified November 4, 2024
A file upload point is an excellent opportunity to execute XSS applications. Many sites have user rights to upload personal data pictures of the upload point, you have a lot...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published June 2, 2017 · Last modified July 30, 2017
WATABO is a security tool for testing web applications. It is intended to enable security professionals to perform efficient (semi-automated) web application security audits. Most important features: WATOBO has Session...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 26, 2017 · Last modified November 4, 2024
BruteXSS is a tool written in python simply to find XSS vulnerabilities in the web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it...
Web Exploitation / WebApp PenTest
by do son · Published May 23, 2017 · Last modified November 4, 2024
What is a local file inclusion (LFI) vulnerability? LFI allows an attacker to include a file on a server through a browser. When a Web application does not properly filter...
Cross-site scripting (XSS) is a common vulnerability in Web vulnerability analysis. In many cases, it was easy to enter without filtering easily, but most of the services analyzed had strong...
Web Information Gathering / Web Vulnerability Analysis
by do son · Published May 13, 2017 · Last modified November 4, 2024
I would like to talk about arachni, an open-source framework among many Web Vulnerability Scanners (WVS). I tested it briefly, and it seems to be usable. Also, you should learn...
Cross Site Scripting (Cross Site Scripting, XSS) is a Web application attack in the data output to the page when there is a problem, leading to an attacker can be...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 1, 2017 · Last modified November 4, 2024
Vega is a free web vulnerability diagnostic scanner developed by SUBGRAPH. The UI is also one of my favorite scanners because of its superior performance compared to other WVS that...
Support Securityonline.info site. Thanks!
