+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: the best tools for web server pentesting? (/showthread.php?tid=6081579)
the best tools for web server pentesting? - gjariolg1657 - May 25, 2020
I am using sqlmap for sqli pentesting.
I wanna know the best tools for web server pentesting include sql injection.
let me know plz.
Thanks
RE: the best tools for web server pentesting? - Sitrep - May 26, 2020
Sqlmap for sql injection ofc, that's the working horse for that!
Mostly I use Burp suite for any webb app pentest and manual testing combined with that.
Nmap for port scanning and subfinder for subdomain enumeration, lastly aquatone for screenshots on the subdomains to find any possible subdomain takeovers.
But this is not server pentesting you're asking for, it's web application testing.
If you have a foothold on a server, that's a whole other set of tools you can use to totally own that system etc.
RE: the best tools for web server pentesting? - кrew - May 27, 2020
This question is so meh. Whats the right tool? It depends on the situation at hand.
Watch some STÖK videos
https://www.youtube.com/channel/UCQN2DsjnYH60SFBIA6IkNwg/featured
RE: the best tools for web server pentesting? - vsi4k036 - May 28, 2020
This is a great list of tools for penetration testing: https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters/blob/master/assets/tools.md
You can use Burp as your primary tool since there are many extensions there which will help you a lot.
RE: the best tools for web server pentesting? - gjariolg1657 - May 28, 2020
(May 28, 2020 02:50 AM)vsi4k036 Wrote: This is a great list of tools for penetration testing: https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters/blob/master/assets/tools.md
You can use Burp as your primary tool since there are many extensions there which will help you a lot.
Good answer for me
Thank you.
RE: the best tools for web server pentesting? - Instamixes - May 28, 2020
Hello Dear, You can try Netsparker.
RE: the best tools for web server pentesting? - veiled - May 29, 2020
(May 28, 2020 10:57 PM)Instamixes Wrote: Hello Dear, You can try Netsparker.
lawl big memelord here