webapps

WhatWeb

March 26, 2018

WhatWeb Package Description WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1700 plugins, each to recognise something different. WhatWeb also identifies version numbers, email addresses, account…

EyeWitness

October 6, 2017

Information Gathering

http, https, infogathering, recon, reporting, webapps

EyeWitness is designed to take screenshots of websites, RDP services, and open VNC servers, provide some server header info, and identify default credentials if possible.

hURL

October 5, 2017

Web Applications

analysis, webapps

hURL is a small utility that can encode and decode between multiple formats.

Gobuster

February 6, 2017

Web Applications

enumeration, http, https, infogathering, webapps

Gobuster is a web content scanner that looks for existing (and/or hidden) web objects. It basically works by launching a dictionary based attack against a web server and analyzing the response.

Commix

February 1, 2016

Exploitation Tools

exploitation, webapps

commix Package Description Commix (short for [comm]and [i]njection e[x]ploiter) has a simple environment and it can be used, from web developers, penetration testers or even security researchers to test web applications with the view to find bugs, errors or vulnerabilities related to command injection attacks. By using this tool, it is very easy to find…

Parsero

June 9, 2014

Information Gathering, Web Applications

infogathering, webapps

Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed.

Arachni

February 19, 2014

Web Applications

exploitation, gui, infogathering, webapps

Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.

deblaze

February 18, 2014

Web Applications

webapps

Through the use of the Flex programming model and the ActionScript language, Flash Remoting was born. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and performing complex business operations.

DIRB

February 18, 2014

Web Applications

enumeration, http, https, infogathering, webapps

DIRB is a Web Content Scanner. It looks for existing (and/or hidden) Web Objects. It basically works by launching a dictionary based attack against a web server and analizing the response.

DirBuster

February 18, 2014

Web Applications

enumeration, gui, http, https, infogathering, webapps

DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

WhatWeb

EyeWitness

hURL

Gobuster

Commix

Parsero

Arachni

deblaze

DIRB

DirBuster

Tools Categories

Recent Additions

webapps

Tools Categories

Recent Additions

Tag Cloud