http | Penetration Testing Tools

Uniscan

February 18, 2014Web Applicationsgui, http, https, vulnanalysis, webapps

Uniscan is a simple Remote File Include, Local File Include and Remote Command Execution vulnerability scanner.

Vega

February 18, 2014Web Applicationsenumeration, gui, http, https, infogathering, vulnanalysis, webapps

Vega is a free and open source scanner and testing platform to test the security of web applications. Vega can help you find and validate SQL Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java.

w3af

February 18, 2014Web Applicationsenumeration, exploitation, gui, http, https, vulnanalysis, webapps

w3af is a Web Application Attack and Audit Framework which aims to identify and exploit all web application vulnerabilities. This package provides a graphical user interface (GUI) for the framework.

WebScarab

February 18, 2014Password Attacks, Sniffing/Spoofing, Web Applicationsfuzzing, gui, http, https, passwords, proxy, sniffing, webapps

WebScarab is designed to be a tool for anyone who needs to expose the workings of an HTTP(S) based application, whether to allow the developer to debug otherwise difficult problems, or to allow a security specialist to identify vulnerabilities in the way that the application has been designed or implemented.

Webshag

February 18, 2014Web Applicationsenumeration, gui, http, https, portscanning, webapps

Webshag is a multi-threaded, multi-platform web server audit tool. Written in Python, it gathers commonly useful functionalities for web server auditing like website crawling, URL scanning or file fuzzing.

Webshells

February 18, 2014Maintaining Accesshttp, https, postexploitation

A collection of webshells for ASP, ASPX, CFM, JSP, Perl, and PHP servers.

WebSlayer

February 18, 2014Web Applicationsfuzzing, gui, http, https, webapps

Webslayer is a tool designed for brute forcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts,files, etc), brute force GET and POST parameters, bruteforce Forms parameters (User/Password), Fuzzing, etc.

WebSploit

February 18, 2014Web Applicationsenumeration, http, https, vulnanalysis, webapps

WebSploit Is an open source project for web application assessments.

WPScan

February 18, 2014Web Applicationshttp, https, vulnanalysis, webapps

WPScan Package Description WPScan is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security issues. Source: http://wpscan.org/ WPScan Homepage | Kali wpscan Repo Author: The WPScan Team License: Other Tools included in the wpscan package wpscan – WordPress vulnerability scanner root@kali:~# wpscan –help _______________________________________________________________ …

XSSer

February 18, 2014Web Applicationsgui, http, https, vulnanalysis, webapps

Cross Site “Scripter” (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. It contains several options to try to bypass certain filters, and various special techniques of code injection.

Tag: http

Uniscan

Vega

w3af

WebScarab

Webshag

Webshells

WebSlayer

WebSploit

WPScan

XSSer

Tools Categories

Recent Additions

Tag: http

Tools Categories

Recent Additions

Tag Cloud