BROWSER INTEGRATION
This tool has many advantages, as a browser-embedded webhacking tool, is very useful for scanning browser-authenticated applications, if browser can authenticate and access to the web application, the tool also can. Note that some other tools do not support neither certificate authentication nor web vpn accesses.
The integration with chrome, provides a more comfortable and agile way of web-hacking, and you have all the application data loaded on the hacking tool, you don't need to copy the url, cookies, etc. to the tool, just right click and hack.
The browser rendering engine is also used in this tool, to draw the html of the responses.
FALSES POSITIVES
When I coded this tool, I was obsessed with false positives, which is the main problem in all detection tools. I have implemented a gauss algorithm, to reduce the faslse positives automatically which works very very well, and save a lot of time to the pentester.
VIDEO
Here is a video, with some of the web-fu functionalitites:
VISUAL FEATURES
This tool has a visual crawler. Normal crawlers doesn't parse the ajvascript, this tool does. The visual crawler loads each link of the web site, rendering the html and executing all the javascript as a normal load, then the links are processed from he DOM and clicked.
A visual form cracker, is also available, althow is experimental and only works on some kind of forms.
SCANNING FEATURES
The web-fu's portscanner, has a database of a common web ports, like 80,81,8080 and so on.
The cracker module, can bruteforce web directories to find new attack vectors, and can fuzz get and post parameters for discovering vulns, and also crack passwords. There are 9 preloaded wordlists, and you can also load a custom wordlist. Prefilters, falsepositive reductor and render will be helpful. The scanners support SSL, if the website can be loaded in the chrome, can be scanned by web-fu.
ENCODERS & DECODERS
The supported encoders and decoders are: base64, urlescape and urlencode
OTHER FEATURES
A web notepad is available, saving the information on the browser localStorage, there is one notepad per site. A cookie editor is also very useful for pentesting. The inteceptor, is like a web proxy but from the inside of the browser, you can intercept a request There is also a session locker and a exploit web search.
CHROME STORE
Here is the link to the chrome store, the prize is about one euro, very cheap if you compare with other scanners: Web-Fu on Chrome Store
With webfu, you will do the best web site pentest and vulnerability assessment.
Read more
- Hack Tool Apk No Root
- Pentest Tools Github
- Pentest Box Tools Download
- Hacking Tools Hardware
- Pentest Tools Kali Linux
- Pentest Tools Website Vulnerability
- Hacking Tools Usb
- Hacker Tools List
- Hack And Tools
- Hacking Tools For Windows 7
- Hack Tools For Ubuntu
- Tools Used For Hacking
- Hack Tools For Windows
- Hacker Tools Linux
- Pentest Tools Kali Linux
- Hacker Search Tools
- Hacking Tools Download
- Beginner Hacker Tools
- Physical Pentest Tools
- Pentest Tools Free
- Hacking Tools Pc
- Hack Tools
- Nsa Hacker Tools
- Pentest Tools Review
- Hack Tools For Windows
- Hacker Tools List
- Hack Tools Github
- Pentest Tools Review
- Growth Hacker Tools
- Hack Apps
- Hacking Tools 2019
- Tools Used For Hacking
- Hacker Tools Apk
- Pentest Tools Free
- Pentest Tools Bluekeep
- Hack Tools For Windows
- Hacking Tools
- Beginner Hacker Tools
- Pentest Tools Kali Linux
- Hacking Tools Github
- New Hack Tools
- Termux Hacking Tools 2019
- Pentest Tools Framework
- Hacking Tools Mac
- Pentest Box Tools Download
- Pentest Box Tools Download
- Hack Website Online Tool
- Hack Tool Apk No Root
- Hacking Tools Windows
- Hack Tools For Windows
- Pentest Automation Tools
- Pentest Tools For Windows
- Pentest Tools For Windows
- Pentest Tools Url Fuzzer
- Hacker Tools Windows
- What Are Hacking Tools
- Best Hacking Tools 2020
- Hack Tools Mac
- Hack Tools Mac
- Pentest Tools Bluekeep
- Pentest Tools Port Scanner
- Hacker Tools Apk Download
- Hacker Tools 2020
- Best Hacking Tools 2020
- Top Pentest Tools
- Hacker Search Tools
- Hack Website Online Tool
- Hack Tools 2019
- Hack Tools Github
- Pentest Tools Url Fuzzer
- Hack Tools
- Hacking Tools Windows
- Pentest Tools Bluekeep
- Game Hacking
- Hacking Tools Download
- Ethical Hacker Tools
- Hacker Security Tools
- Pentest Tools Open Source
- Hacking App
- Hacking Tools For Windows Free Download
- Hacker Search Tools
- Pentest Tools List
- Best Hacking Tools 2020
- Hacking Tools Usb
- Hacking Tools Github
- Hack App
- Best Hacking Tools 2019
- Hacker Tool Kit
- Pentest Tools For Ubuntu
- Hack Tools Online
- Best Hacking Tools 2019
- Hacker Tools For Mac
- Nsa Hack Tools
- Ethical Hacker Tools
- Hacker Hardware Tools
- Hacking Tools Windows 10
- Hacker Tools Github
- Hacker Techniques Tools And Incident Handling
- Hacking Tools For Windows 7
- Free Pentest Tools For Windows
- Hacker Tools Windows
- Pentest Tools Online
- Hak5 Tools
- Hacking Tools For Mac
- Pentest Tools Website
- Hacking Tools Github
- Hacking Tools Software
- Pentest Tools Nmap
- Pentest Tools Subdomain
- Hacking Tools Kit
- Hacking Tools Kit
- Pentest Tools Download
- Pentest Tools Review
- Nsa Hacker Tools
- Pentest Automation Tools
- Hacker Tools List
- Hacker Tools Hardware
- Hacking Tools For Mac
- Underground Hacker Sites
- Hacking Tools For Windows
- Hacker Tools 2019
- Tools Used For Hacking
- Hack Apps
- Nsa Hacker Tools
- Pentest Tools For Mac
- Hack Tools Pc
- Pentest Tools Apk
- Hak5 Tools
- Pentest Tools Free
No hay comentarios:
Publicar un comentario