Questions tagged [web-scanners]

A web application security scanner performs a black box test on a web application to identify potential security vulnerabilities and architectural weaknesses in the web application.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

using dirb to concatenate wordlist words? [closed]

let's assume there is a web application and in the start of every page, it have ots-, for example: ots-download.php, ots-upload and etc... so how do I tell dirb to scan for files but first ...
3
votes
5answers
382 views

How to introduce delay in scanning tools that do not implement delay without touching source code?

Usually scanning tools implement a switch in order to delay requests and not flood the target. Sometimes there tools that do not implement this delay option. Is there a way to delay packets from ...
2
votes
4answers
6k views

Sucuri giving false positive with their free online scanner because of an .htaccess RewriteRule

I'm not sure where to ask this Question - here, SO, Webmasters.SE, somewhere else? Please migrate if appropriate. tl;dr: The following rule in my .htaccess is causing Sucuri's free online scanner to ...
0
votes
1answer
232 views

over 100 scanner requests 5 min after domain registration

First off, I am no security expert! Yesterday I registered a .cf domain, I needed it for about 10 minutes. About 5 minutes after domain registration I got over 100 scanner requests (I checked all ...
1
vote
1answer
159 views

Getting scanned on AWS Elastic BeanStalk

As soon as I upload/deploy an application to AWS Elastic BeanStalk, it gets scanned for common admin pages even though it’s not linked to by any external website and I have not shared the DNS name ...
0
votes
1answer
155 views

Is there anywhere we can scan projects (PHP, JAVA…) for vulnerabilities, like VirusTotal.com does (All-in-one)? [closed]

Virustotal is excellent in its field. Does there exist any tool (or site) where we could upload (or that could be also an offline PC version) to test projects or websites (PHP, Java, whatever) for ...
15
votes
4answers
17k views

nginx - How to prevent processing requests with undefined server names with HTTPS

How do I avoid nginx processing a request with an undefined server name using the https protocol. The following configuration makes this work for normal http requests. It resets the connection for ...
1
vote
0answers
92 views

Wordpress detect plugins when wpscan fails

I was provided a challenge from a friend, where I have a latest wordpress installation with a vulnerable plugin. I was requested to detect the vulnerability so for that I used wpscan in order to do ...
1
vote
3answers
7k views

How to scan a website using Nessus with login credentials

I have scanned my website using Nessus.But I need to scan it as logged in user since most of the urls are accessible only if we are logged in.How can I set website login credentials in Nessus?
4
votes
3answers
250 views

Scan for common web applications?

Is there an automated tool that takes a list of hosts and figures out which common web applications (such as Wordpress, Mediawiki, Joomla etc) they are running and - if possible - which version and ...
2
votes
1answer
417 views

Nikto: this might be interesting… file redirects

What does Nikto's "this could be interesting" log mean? It identified a file (say, admin.html) as potentially interesting. However, when I wget or attempt to access this file in a browser, it just ...
2
votes
1answer
4k views

Nikto authentication

I am trying to complete a war game on Hell Bound Hackers. I wish to use the nikto scanner to check some pages for vulnerabilities, however I first need to log into the Hell Bound Hackers war game, ...
2
votes
3answers
13k views

Can you export a report from OWASP ZAP based off a individual website?

I have a list of 30 websites I have scanned. I need to pull out a report for each individual website. Is it possible to do? Right now I am just running a report and getting the results for all 30 and ...
5
votes
4answers
2k views

Can websites access computers in LAN/Localhost through browser & how to block them? [duplicate]

Question 1: While browsing internet, can websites execute code through my browser that access websites or services that are hosted on Localhost or LAN? Question 2: Also, can data from intranet ...
1
vote
2answers
3k views

Most efficient way to scan for webservers

Lets say I want to scan a large amount of ip addresses for webservers running on port 80 (aware that there are other ports for webservers, ignoring for example). What would be the most efficient way ...
1
vote
1answer
1k views

Was my phpMyAdmin hacked?

On a server of mine I have a current version of phpMyAdmin running. Unfortunately (my bad I knew I had to delete this folder for security after installation, I simply forgot... dangit) I still had the ...
0
votes
1answer
8k views

Configuring burp to use in proxy environment

My university internet connection runs behind proxy. Its host name is 192.168.1.103 and port no is 3128. How do I configure proxy in burp suite if I should enter above proxy setting in my Firefox ...
4
votes
2answers
4k views

Do you know any crawler/spider software, which is able to go through an ASP.NET site?

Do you know any crawler/spider software, which is able to go through ASP.NET application, not ASP.NET MVC, but the one full of __doPostBack JavaScript functions on every link/button/change event? If ...
0
votes
3answers
4k views

How to detect Selenium/webdriver browsing on my site [closed]

I have a website and I notice a lot of bots traffic, I guess trying to extract data from the site. I managed to detect some traffics with scripts, or IP rate limits, but I see I can't detect access ...
2
votes
3answers
22k views

How to exploit this SQL injection vulnerability?

I am learning SQL injection on a vulnerable web app. I scanned it with w3af. It showed many vulnerabilities. One of them is: SQL injection in a Microsoft SQL database was found at: "http://www....
1
vote
2answers
124 views

Why is “ Generic MIME used” a security vulnerability?

Some web application security scanners like Skipfish reports vulnerability "Generic MIME used". In my case this vulnerability was reported for resources like http://my_site/fonts/fontawesome-webfont....
4
votes
3answers
31k views

Scan all possible files on server (Brute force Filenames)

I'm looking for a tool which can scan all possible filename combinations on a server and tells you what filenames the server responded to. So it would try something like: example.com/a, example.com/b,...
2
votes
3answers
715 views

How to defend against web server security scanners? [closed]

I'm developing/hosting an Asp.Net IIS Website on AWS. I have added StackExchange.Exceptional, and in the first days, I get exceptions about attempts to access pages like: /CFIDE/administrator/ and ...
45
votes
3answers
13k views

How does the attacker discover our server? [duplicate]

As titled, we discovered some unknown IP address is accessing our API Server. We have set up an AWS EC2 instance as an API server. The API server URL is only used in our mobile app. However, our ...
0
votes
2answers
967 views

Security scan with, or without, IP whitelisting in the firewall and isn't that introducing a weak point?

In case of an automated security scan is it more desirable to get the scanner IP addresses whitelisted in order to possibly find vulnerabilities behind the firewall, or to scan in front of/against the ...
2
votes
2answers
401 views

Detect a Host on my Network that is Conducting Web Scraping on External Systems

It recently came to my attention (through an outside company) that a host on my internal LAN may be conducting web scraping activity against that outside company's web servers. Due to this activity, ...
9
votes
2answers
326 views

Given a vulnerable JavaScript snippet from a Stack Overflow answer, how can I cheaply find websites whose authors have copied and pasted it?

Frequently, Stack Overflow answers to JavaScript questions contain XSS vulnerabilities (or vulnerabilities of other kinds). For instance, this answer with 420 upvotes and a quarter of a million views ...
1
vote
1answer
29 views

Reason behind sending multiple probes when scanning?

I've read, that the ZMap creators recommend to send three probes for each (ip,port) tuple when scanning. Let's say, we scan port 443 port with a TCP SYN scan. One reason, I can imagine is packet loss. ...
4
votes
1answer
281 views

Why would an attacker include a request body with an HTTP GET request?

I have a website that does not run PHP (management decision) or has wordpress installed. Intermittently, I receive a few requests for wp_login pages that trip my IDS. The requests are served with a ...
0
votes
3answers
243 views

Is this a website attack / vulnerability test?

I have a specific IP that has been iterating through the directories on my site testing for something. Here is an example of what it keeps trying to hit: http://<site>/<path>/change....
1
vote
2answers
921 views

Vulnerability scanning vs fuzzing a web application

In the context of web applications, is vulnerability scanning a form of fuzzing? I was told it wasn't the case, but here's what I know: Wikipedia defines fuzzing as "providing invalid, unexpected, ...
2
votes
0answers
67 views

Smart web spider? [closed]

When testing a web app, I often start with spidering the app in order to get an idea of the structure of the app. What bothers me with that approach is that thal all spidering tools that I tried are ...
2
votes
2answers
2k views

Malware removal: Iframe injected javascript

My Joomla! website is infected by an iframe injected malware, according to Sucuri SiteCheck: To remove the malware, does it suffice to remove the infected file site/media/system/js/caption.js? Or ...
1
vote
1answer
2k views

Vulnerability scanning of AngularJS web app fails due to '#' in url

I tried scanning my web application built with AngularJS front-end and PHP backend. But scanning with scanners like Nessus and Websecurify fails due to '#' in URL. My URL has format http://domain....
4
votes
2answers
911 views

IBM AppScan false positive

I scanned a website with IBM AppScan and it reports multiple vulnerabilities, but when I test it manually I am not able to find the exact issue. How is AppScan able to find vulnerabilities while I ...
-2
votes
1answer
92 views

Web Application Security Scanner Identification [duplicate]

We got following URLs in our access logs. No referrer. Chrome user agent. Looks like some security scanner is/was at work. Is it possible to identify it? Many urls have references to netsparker. / /'/...
2
votes
2answers
331 views

Strange requests to my server

I recently checked my logs and found some strange requests to my server. eg GET /path/Microsoft.XMLHTTP HTTP/1.0 GET /path2/Scripting.FileSystemObject HTTP/1.0 A further check seems to point to some ...
1
vote
1answer
100 views

Is it possible for web scanners to crawl and test pages simultaneously?

I've searched and read some articles about web application security scanners. I've found that almost all scanners at first crawl the application to find all pages (or states). And then after crawling ...
3
votes
2answers
3k views

How to Estimate time taken for Web Application Security Testing?

I would like to do some kind of estimation for time taken to test a website/ web application for security vulnerabilities. I will be testing websites against OWASP Top 10 Based on my understanding, ...
5
votes
2answers
126 views

Is it worth it to install the same web application on different kind of web servers in a vulnerability assessment?

When doing a web vulnerability assessment with tools such as Acunetix and w3af, is it worth it to install the same web application on multiple types of web servers (Apache, IIS, etc.)? If differences ...
1
vote
3answers
5k views

Is scanning a site directory considered illegal penetration testing?

Does anyone know if using Dirbuster [link] to scan for unlisted directories and their contents is (possibly) legal in say the US?
63
votes
16answers
56k views

What tools are available to assess the security of a web application?

What tools are available to assess the security of a web application? Please provide a small description of what the tool does. Update: More specifically, I'm looking for tools that assume no ...
1
vote
1answer
723 views

Does it make sense to scan localhost site?

I was playing around with wpscan a little while ago. I was wondering if it makes sense to scan a site on your localhost server. I think that it is since there are examples like DVWA, but I imagine it ...
0
votes
2answers
5k views

Source code disclosure vulnerability

I am a bit confused about the discussion here about hiding javascript source code. Let's say if I browse to a url like this: http://www.example.com/site/somejs.js and then what I see is something like ...
1
vote
1answer
8k views

Cross Domain Javascript security [duplicate]

I used a web vulnerability scanner to scan my web site. It indicates several links with "Cross domain Java script source file inclusion." May I know how would an attacker exploit this type of ...
34
votes
4answers
7k views

Why am I getting strange HTTP requests for non-existing pages?

I am running a web server and watching what people request. I have been getting frequent traffic like: GET /phph/php/ph.php HTTP/1.1 or GET /mrmr/mrm/mr.php HTTP/1.1 Are these scans? Are the ...
0
votes
3answers
4k views

How to determine if someone is scanning my server?

How is possible to determine if someone make requests with tools for pentesting? Is there any linux command?
1
vote
2answers
3k views

Credentialed scans and the Burp Suite active Scanner

I have been running scans on a few web applications that require a typical username and password to gain access to the website. I usually remain logged in through the browser my proxy is running ...
1
vote
3answers
486 views

What is the first step in auditing the security efficiency of a simple website?

I am asked to write a first technical audit about the security best practices to improve a PHP web-site security. I am wondering from where to start? Is there a famous audit forms to analyze and ...
2
votes
0answers
64 views

Burp warning whenever I write a rule? [closed]

Whenever I write rule and save it in burp it gives this warning, I am not able to find out why it warns me The rule is not in-scope for any URLs. Are you sure yu want to proceed? While the rule is ...