jueves, 27 de agosto de 2020

Web-fu - The Ultimate Web Hacking Chrome Extension

Web-fu Is a web hacking tool focused on discovering and exploiting web vulnerabilitites.

 BROWSER INTEGRATION 

This tool has many advantages, as a browser-embedded webhacking tool, is very useful for scanning browser-authenticated applications, if browser can authenticate and access to the web application, the tool also can. Note that some other tools do not support neither certificate authentication nor web vpn accesses.
The integration with chrome, provides a more comfortable and agile way of web-hacking, and you have all the application data loaded on the hacking tool, you don't need to copy the url, cookies, etc. to the tool, just right click and hack.
The browser rendering engine is also used in this tool, to draw the html of the responses.


 FALSES POSITIVES 

When I coded this tool, I was obsessed with false positives, which is the main problem in all detection tools.  I have implemented a gauss algorithm, to reduce the faslse positives automatically which works very very well, and save a lot of time to the pentester.


 VIDEO 

 Here is a video, with some of the web-fu functionalitites:

 VISUAL FEATURES 

This tool has a visual crawler. Normal crawlers doesn't parse the ajvascript, this tool does. The visual crawler loads each link of the web site, rendering the html and executing all the javascript as a normal load, then the links are processed from he DOM and clicked.
A visual form cracker, is also available, althow is experimental and only works on some kind of forms.


 SCANNING FEATURES

The web-fu's portscanner, has a database of a common web ports, like 80,81,8080 and so on.
The cracker module, can bruteforce web directories to find new attack vectors, and can fuzz get and post parameters for discovering vulns, and also crack passwords. There are 9 preloaded wordlists, and you can also load a custom wordlist. Prefilters, falsepositive reductor and render will be helpful. The scanners support SSL, if the website can be loaded in the chrome, can be scanned by web-fu.


ENCODERS & DECODERS

The supported encoders and decoders are: base64, urlescape and urlencode


OTHER FEATURES

A web notepad is available, saving the information on the browser localStorage, there is one notepad per site. A cookie editor is also very useful for pentesting. The inteceptor, is like a web proxy but from the inside of the browser, you can intercept a request There is also a session locker and a exploit web search.


CHROME STORE 
Here is the link to the chrome store, the prize is about one euro, very cheap if you compare with other scanners: Web-Fu on Chrome Store


 With webfu, you will do the best web site pentest and vulnerability assessment.


Related news


  1. Ethical Hacker Tools
  2. Hacker Tools Hardware
  3. Hacker Tools Linux
  4. How To Make Hacking Tools
  5. Hacker Tools Windows
  6. Hacking Apps
  7. Hacker Tools 2019
  8. Pentest Tools Url Fuzzer
  9. Hacking Tools Windows
  10. Hack Tool Apk No Root
  11. Hack Tools Mac
  12. Beginner Hacker Tools
  13. Hack Tools Mac
  14. Hack Rom Tools
  15. Easy Hack Tools
  16. Pentest Tools Url Fuzzer
  17. Pentest Tools Apk
  18. Hack Tools Mac
  19. How To Make Hacking Tools
  20. Hacker Tools Apk Download
  21. Hacker Tools List
  22. Hacker Tools For Mac
  23. Hack Tools 2019
  24. Hacking Tools Mac
  25. Hacker Tools Github
  26. New Hacker Tools
  27. Hacker Tools Online
  28. Hacking Tools For Pc
  29. Best Pentesting Tools 2018
  30. Best Pentesting Tools 2018
  31. Pentest Tools Linux
  32. Free Pentest Tools For Windows
  33. Pentest Tools Free
  34. Hack Tools 2019
  35. Pentest Reporting Tools
  36. Hacker Security Tools
  37. Nsa Hack Tools Download
  38. Pentest Tools Framework
  39. World No 1 Hacker Software
  40. Hacking Tools For Windows Free Download
  41. Pentest Tools List
  42. Wifi Hacker Tools For Windows
  43. Hack Tools Github
  44. Blackhat Hacker Tools
  45. Hacker Tool Kit
  46. Tools Used For Hacking
  47. Pentest Tools Url Fuzzer
  48. Hacking Tools 2019
  49. Hacking Tools Software
  50. Hacker Tools 2019
  51. Hack Tools Mac
  52. Best Pentesting Tools 2018
  53. Physical Pentest Tools
  54. Pentest Recon Tools
  55. Hacking Tools Name
  56. Hacking Tools Name
  57. Hacking Tools Software
  58. Hack Tools Mac
  59. Pentest Tools Alternative
  60. Hack Tools Online
  61. Top Pentest Tools
  62. Hacking Tools Mac
  63. Pentest Reporting Tools
  64. Hacker Tool Kit
  65. Hacker Tools For Mac
  66. Pentest Tools Android
  67. Hacks And Tools
  68. Hacking Tools For Kali Linux
  69. Blackhat Hacker Tools
  70. Pentest Tools Open Source
  71. Pentest Reporting Tools
  72. Hacking Tools Kit
  73. Hacking Tools For Games
  74. Kik Hack Tools
  75. Hacker Tools Online
  76. Free Pentest Tools For Windows
  77. Pentest Tools Bluekeep
  78. Pentest Tools Nmap
  79. Hacker Tool Kit
  80. Hacker Tools Linux
  81. New Hack Tools
  82. Free Pentest Tools For Windows
  83. Hack Tool Apk
  84. Hacking Tools Windows 10
  85. Hackers Toolbox
  86. Hack Tools For Pc
  87. Hacking Tools For Windows 7
  88. Hacker Tools Apk
  89. Hacker Tools 2019
  90. Hacker Tools Online
  91. What Are Hacking Tools
  92. How To Hack
  93. Hacking Apps
  94. Hacker Tools Free
  95. Hacking Tools For Windows 7
  96. Hacks And Tools
  97. Nsa Hack Tools Download
  98. Hacking Tools And Software
  99. Hacker Tools 2019

No hay comentarios: