A web application security scanner performs a black box test on a web application to identify potential security vulnerabilities and architectural weaknesses in the web application.
17
votes
5answers
2k views
Where can I find a solid BURP tutorial?
I'm looking for a good resource for learning/configuring BURP. I understand the concepts behind using the framework, and have read the docs on the site, but if anyone has a solid tutorial link I ...
12
votes
3answers
293 views
Are there any decent web app security scanners that can integrate with a build server?
I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great.
What I'd really like to do is find a decent web app ...
5
votes
4answers
126 views
How to know if two IP addresses point to the same web server?
Doing some testing against two IP address in the scope I find one web server in each one. Both host what it seems the same web application.
They are different public (accessible through Internet) IP ...
5
votes
1answer
2k views
Does WebDAV pose an unreasonable risk in IIS7.5?
I'm looking for a bit of feedback on WebDAV, in this case running on IIS7.5. I've had an IBM Rational AppScan report come to me with a medium severity finding as a result of DAV entries in the ...
4
votes
2answers
264 views
How can I find the malicious/backdoor codes without knowing the last modified date?
Last night my website got hacked and attacker edited the main index.php.
I was wondering even he edited that file, the last modified date did not change.
so I just worry if he would put the backdoor ...
4
votes
2answers
1k views
Preventing Attacks Scanning for PHPMyAdmin etc
I have a Linux web server running Rails and each time I check the Nginx logs I find attempts to access PHPMyAdmin, database and admin directories such as this:
190.196.161.110 - - ...
4
votes
3answers
425 views
SQL Injection How to inject Clean/Rest URLS
I have a question I'm hoping you could help me with?
Unclean url's:
http://example.com/index.php?page=foo
http://example.com/products?category=2&pid=25
...
3
votes
5answers
121 views
How to introduce delay in scanning tools that do not implement delay without touching source code?
Usually scanning tools implement a switch in order to delay requests and not flood the target. Sometimes there tools that do not implement this delay option.
Is there a way to delay packets from ...
3
votes
2answers
830 views
Scanning DVWA with w3af - Unable to detect SQLi when security on low
I've been messing around with DVWA (Damn vulnerable web application) and w3af. I've been scanning DVWA with w3af, and have used the spiderMan proxy and http config to setup auth credentials to get ...
3
votes
2answers
127 views
Scan for common web applications?
Is there an automated tool that takes a list of hosts and figures out which common web applications (such as Wordpress, Mediawiki, Joomla etc) they are running and - if possible - which version and ...
2
votes
5answers
192 views
Website vulnerability scanner in Java && Open Source
I am working on a Web platform that must-need-should have a good level of security.
Therefore, I am interested in a good quality tool to test my Web platform QA on security.
My main programming ...
2
votes
2answers
348 views
Looking for open source crawler/spider & scanner [closed]
Until now I managed to look into Webscarab, Webscarab-NG, IronWASP & Burp extender.
Unfortunately, except IronWASP, that refused to compile from the GIT source, none of the projects matched my ...
2
votes
1answer
106 views
Services Like McAfee Secure
What do monitoring services like Mcafee Secure actually provide? It's about $1000 per year and I'm trying to judge what they actually do, as their benefits and technology pages might as well be the ...
2
votes
3answers
189 views
Sucuri giving false positive with their free online scanner because of an .htaccess RewriteRule
I'm not sure where to ask this Question - here, SO, Webmasters.SE, somewhere else? Please migrate if appropriate.
tl;dr:
The following rule in my .htaccess is causing Sucuri's free online scanner to ...
1
vote
3answers
594 views
Is scanning a site directory considered illegal penetration testing?
Does anyone know if using Dirbuster [link] to scan for unlisted directories and their contents is (possibly) legal in say the US?
1
vote
2answers
362 views
AVG Website Scan, Chance of 'Potential Threat'?
In a recent question I asked about investigating websites for viruses.
The answers were very helpful, I ended up using the AVG website scanner. First I used it on our website and found it was clean, ...
1
vote
2answers
129 views
What is the first step in auditing the security efficiency of a simple website?
I am asked to write a first technical audit about the security best practices to improve a PHP web-site security.
I am wondering from where to start? Is there a famous audit forms to analyze and ...
1
vote
3answers
87 views
Self Tests for cPanel Server PCI Compliance
(Edited & added more information at the bottom of this question)
I've been tasked with "testing" a client's Linux web servers, running cPanel (which they own and mostly manage, until they come to ...
1
vote
1answer
228 views
Lots of 'unidentified exploits' detected with w3af
I've been running some scans across a few different networks and on certain sites I will get a flag about an unidentified exploit in the log. When I review what the exploit is, most of the time its a ...
1
vote
1answer
214 views
Web Crawling Legal Issues [closed]
I am wondering if there are any legal guidelines concerning web-crawling.
Assuming that I respect the robots.txt, what else do I have to take into account. Are there any restrictions regarding e.g.
...
0
votes
3answers
1k views
How to exploit this SQL inection vulnerability?
I am learning SQL injection on a vulnerable Web App. I scanned it with w3af. It showed many vulnerabilities. One of them is :
SQL injection in a Microsoft SQL database was found at: ...
0
votes
1answer
736 views
Identify an HTTP scanner from some HTTP headers
My personal Apache server occasionally gets some pretty obvious scans for vulnerabilities. The client that does the scanning does GET HTTP/1.1 methods on a variety of URLs, and uses a variety of ...
0
votes
1answer
136 views
FoundStone scan + URI filtering
I have a server that is protected with a firewall with URI filtering rule.
So if you go http://x.x.x.x/URIFilter/Something you will get to the server, but if you don't put URIfilter into URL or use ...
0
votes
0answers
68 views
Client Side Negotiation
I have -MultiViews set and SSLInsecureNegotation off ( in ifmodule of mod_ssl.c) in Apache.
But still vulnerability report says I am vulnerable to client side renegotiation and "This server is ...
-2
votes
1answer
39 views
w3af plugin development example [closed]
I'm new to w3af, and I would like to build my own plugin. I have searched on w3af web and googled it for some examples but no luck...
Can anyone give me an example how to start building plugins or ...
-5
votes
1answer
122 views
How to find bugs/ vulnerabilities in web apps/sites? [closed]
What knowledge is needed?
What software is to be used?
How are the reports written? PS: Websites like facebook.com
