All Questions
Tagged with tools web-application
15 questions
-2
votes
2
answers
672
views
Why use tools such as BurpSuite, nmap or SQLmap?
I mean why are tools needed for pen-testing? I've hacked websites using plain XSS and SQL injections. I didn't require any tools such as the ones I listed above. Now that I want to progress further ...
- 13
-1
votes
2
answers
826
views
ZAP: Evaluate / Show response in browser
Let's say I've edited a request and successfully found a XSS vulnerability. Now, I want to validate that in the browser.
However, since the payload was sent with POST, I can't just use "Open URL in ...
- 101
125
votes
6
answers
260k
views
How to find out what programming language a website is built in?
I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in.
I know that URL extensions, HTTP headers, ...
- 1,742
0
votes
1
answer
5k
views
Scanner / tool to generate a list with all forms and input fields of a website [closed]
I'm not very experienced with information security but know some basics about injection attacks and other web based attacks. Is there a tool / crawler to find all forms and input fields of a whole ...
- 121
3
votes
2
answers
401
views
Is it possible to make a "proof of anteriority" for sites content?
Given a site that publishes unique content online and given that there are lots of site scrapers and persons stealing content and reposting it as their own, inevitably you will have the same content ...
- 33
2
votes
2
answers
58k
views
sqlmap unable to find SQL injection vulnerablitity
so i just started up with sqlmap to learn sql injection vulnerability on my application. Here I followed steps as per some tutorials.
So this are the steps which i followed :
sqlmap.py -u "http://...
- 197
5
votes
2
answers
9k
views
SQL Injection - Extracting database data from the page content
I have a question I am hoping someone could help with..
I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
- 545
3
votes
1
answer
929
views
What are good tools for CRLF discovery? [closed]
What are good tools for finding CRLF injection vulnerabilities?
- 1,452
4
votes
2
answers
2k
views
SQL Injection - Automating the fingerprinting of the DBMS
I have a problem I'm hoping someone could help with regarding the fingerprinting of the DBMS using sql injection, in a scripted/automated way to accurately and reliabling determine the DBMS.
I am in ...
- 545
6
votes
1
answer
11k
views
SQL Injection - UNION SELECT and returning a 'keyword' to find exploitable columns
I have a problem I'm hoping someone could help with regarding the use of UNION SELECT, in a scripted/automated way to find columns that are exploitable (having already found the number of columns ...
- 545
23
votes
4
answers
51k
views
Testing clean urls with sqlmap
Is it possible to test for SQL injection vulnerabilities with using sqlmap with a url that is using mod rewrite (or something like it) to make the urls clean?
I know how to test my sites that have ...
- 339
3
votes
1
answer
3k
views
Are there any tools for automated penetration testing of Silverlight applications? [closed]
I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.
Specifically, I'm looking for a tool that can cope with ...
- 183
8
votes
6
answers
8k
views
Fortify360 - Sinks & Sources - Vulnerability count
In an application security environment, I use Fortify Software's Fortify360 on a daily basis.
One of my biggest hurdles is explaining the numbers (sources vs sinks)
Fortify flags each location in ...
- 2,006
16
votes
3
answers
993
views
Are there any decent web app security scanners that can integrate with a build server?
I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great.
What I'd really like to do is find a decent web app ...
- 3,920
63
votes
16
answers
57k
views
What tools are available to assess the security of a web application?
What tools are available to assess the security of a web application?
Please provide a small description of what the tool does.
Update: More specifically, I'm looking for tools that assume no ...
- 5,129