Web-fu Is a web hacking tool focused on discovering and exploiting web vulnerabilitites.
BROWSER INTEGRATION
This tool has many advantages, as a browser-embedded webhacking tool, is very useful for scanning browser-authenticated applications, if browser can authenticate and access to the web application, the tool also can. Note that some other tools do not support neither certificate authentication nor web vpn accesses.
The integration with chrome, provides a more comfortable and agile way of web-hacking, and you have all the application data loaded on the hacking tool, you don't need to copy the url, cookies, etc. to the tool, just right click and hack.
The browser rendering engine is also used in this tool, to draw the html of the responses.
FALSES POSITIVES
When I coded this tool, I was obsessed with false positives, which is the main problem in all detection tools. I have implemented a gauss algorithm, to reduce the faslse positives automatically which works very very well, and save a lot of time to the pentester.
VIDEO
Here is a video, with some of the web-fu functionalitites:
VISUAL FEATURES
This tool has a visual crawler. Normal crawlers doesn't parse the ajvascript, this tool does. The visual crawler loads each link of the web site, rendering the html and executing all the javascript as a normal load, then the links are processed from he DOM and clicked.
A visual form cracker, is also available, althow is experimental and only works on some kind of forms.
SCANNING FEATURES
The web-fu's portscanner, has a database of a common web ports, like 80,81,8080 and so on.
The cracker module, can bruteforce web directories to find new attack vectors, and can fuzz get and post parameters for discovering vulns, and also crack passwords. There are 9 preloaded wordlists, and you can also load a custom wordlist. Prefilters, falsepositive reductor and render will be helpful. The scanners support SSL, if the website can be loaded in the chrome, can be scanned by web-fu.
ENCODERS & DECODERS
The supported encoders and decoders are: base64, urlescape and urlencode
OTHER FEATURES
A web notepad is available, saving the information on the browser localStorage, there is one notepad per site. A cookie editor is also very useful for pentesting. The inteceptor, is like a web proxy but from the inside of the browser, you can intercept a request There is also a session locker and a exploit web search.
CHROME STORE
Here is the link to the chrome store, the prize is about one euro, very cheap if you compare with other scanners: Web-Fu on Chrome Store
With webfu, you will do the best web site pentest and vulnerability assessment.
Related news
- Ethical Hacker Tools
- Hacker Tools Hardware
- Hacker Tools Linux
- How To Make Hacking Tools
- Hacker Tools Windows
- Hacking Apps
- Hacker Tools 2019
- Pentest Tools Url Fuzzer
- Hacking Tools Windows
- Hack Tool Apk No Root
- Hack Tools Mac
- Beginner Hacker Tools
- Hack Tools Mac
- Hack Rom Tools
- Easy Hack Tools
- Pentest Tools Url Fuzzer
- Pentest Tools Apk
- Hack Tools Mac
- How To Make Hacking Tools
- Hacker Tools Apk Download
- Hacker Tools List
- Hacker Tools For Mac
- Hack Tools 2019
- Hacking Tools Mac
- Hacker Tools Github
- New Hacker Tools
- Hacker Tools Online
- Hacking Tools For Pc
- Best Pentesting Tools 2018
- Best Pentesting Tools 2018
- Pentest Tools Linux
- Free Pentest Tools For Windows
- Pentest Tools Free
- Hack Tools 2019
- Pentest Reporting Tools
- Hacker Security Tools
- Nsa Hack Tools Download
- Pentest Tools Framework
- World No 1 Hacker Software
- Hacking Tools For Windows Free Download
- Pentest Tools List
- Wifi Hacker Tools For Windows
- Hack Tools Github
- Blackhat Hacker Tools
- Hacker Tool Kit
- Tools Used For Hacking
- Pentest Tools Url Fuzzer
- Hacking Tools 2019
- Hacking Tools Software
- Hacker Tools 2019
- Hack Tools Mac
- Best Pentesting Tools 2018
- Physical Pentest Tools
- Pentest Recon Tools
- Hacking Tools Name
- Hacking Tools Name
- Hacking Tools Software
- Hack Tools Mac
- Pentest Tools Alternative
- Hack Tools Online
- Top Pentest Tools
- Hacking Tools Mac
- Pentest Reporting Tools
- Hacker Tool Kit
- Hacker Tools For Mac
- Pentest Tools Android
- Hacks And Tools
- Hacking Tools For Kali Linux
- Blackhat Hacker Tools
- Pentest Tools Open Source
- Pentest Reporting Tools
- Hacking Tools Kit
- Hacking Tools For Games
- Kik Hack Tools
- Hacker Tools Online
- Free Pentest Tools For Windows
- Pentest Tools Bluekeep
- Pentest Tools Nmap
- Hacker Tool Kit
- Hacker Tools Linux
- New Hack Tools
- Free Pentest Tools For Windows
- Hack Tool Apk
- Hacking Tools Windows 10
- Hackers Toolbox
- Hack Tools For Pc
- Hacking Tools For Windows 7
- Hacker Tools Apk
- Hacker Tools 2019
- Hacker Tools Online
- What Are Hacking Tools
- How To Hack
- Hacking Apps
- Hacker Tools Free
- Hacking Tools For Windows 7
- Hacks And Tools
- Nsa Hack Tools Download
- Hacking Tools And Software
- Hacker Tools 2019
No hay comentarios:
Publicar un comentario