jeudi 16 avril 2020

Spaghetti: A Website Applications Security Scanner


About Spaghetti
   Author: m4ll0k   Spaghetti is an Open Source web application scanner, it is designed to find various default and insecure files, configurations, and misconfigurations. Spaghetti is built on Python 2.7 and can run on any platform which has a Python environment.

Spaghetti Installation:

Spaghetti's Features:
   Fingerprints:
  • Server:
  • Web Frameworks (CakePHP,CherryPy,...)
  • Web Application Firewall (Waf)
  • Content Management System (CMS)
  • Operating System (Linux,Unix,..)
  • Language (PHP,Ruby,...)
  • Cookie Security
   Discovery:
  • Bruteforce:Admin Interface
    Common Backdoors
    Common Backup Directory
    Common Backup File
    Common Directory
    Common FileLog File
  • Disclosure: Emails, Private IP, Credit Cards
   Attacks:
  • HTML Injection
  • SQL Injection
  • LDAP Injection
  • XPath Injection
  • Cross Site Scripting (XSS)
  • Remote File Inclusion (RFI)
  • PHP Code Injection
   Other:
  • HTTP Allow Methods
  • HTML Object
  • Multiple Index
  • Robots Paths
  • Web Dav
  • Cross Site Tracing (XST)
  • PHPINFO
  • .Listing
   Vulns:
  • ShellShock
  • Anonymous Cipher (CVE-2007-1858)
  • Crime (SPDY) (CVE-2012-4929)
  • Struts-Shock
Spaghetti Example:
python spaghetti --url example.com --scan 0 --random-agent --verbose


More information
  1. Hack Tool Apk
  2. Hack Tools Mac
  3. Install Pentest Tools Ubuntu
  4. Pentest Tools Android
  5. Pentest Tools Framework
  6. How To Make Hacking Tools
  7. What Is Hacking Tools
  8. Hacker Tools Apk Download
  9. Hacking Tools 2019
  10. Game Hacking
  11. Wifi Hacker Tools For Windows
  12. Hacking Tools Usb
  13. Pentest Tools For Windows
  14. Hacker Tools Software
  15. Hacker Tools Apk
  16. Hacking Apps
  17. Hack Tools
  18. Github Hacking Tools
  19. Hacker
  20. Pentest Tools Website Vulnerability
  21. Pentest Tools Website
  22. Easy Hack Tools
  23. Best Pentesting Tools 2018
  24. Hacking Tools Usb
  25. Pentest Tools For Windows

Aucun commentaire:

Enregistrer un commentaire