+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: what scanners do you use to scan sites for vuln? (/showthread.php?tid=6118607)
what scanners do you use to scan sites for vuln? - drneed - Oct 30, 2020
OSINT probably..
-----------------------------------------------------------
RE: what scanners do you use to scan sites for vuln? - 10000days - Oct 30, 2020
I'd recommend checking out:
- sqlmap
- OpenDoor
- WPScan
- XSStrike
RE: what scanners do you use to scan sites for vuln? - G.P.D. - Oct 30, 2020
(Oct 30, 2020 03:29 PM)10000days Wrote: I'd recommend checking out:
- sqlmap
- OpenDoor
- WPScan
- XSStrike
Those are really good scanners, but I'd recommend Nikto and DNSDumpster as well :
https://github.com/sullo/nikto
https://dnsdumpster.com/
RE: what scanners do you use to scan sites for vuln? - ButtermilkJesus - Nov 1, 2020
(Oct 30, 2020 05:25 PM)Whait Wrote: Those are really good scanners, but I'd recommend Nikto and DNSDumpster as well :
https://github.com/sullo/nikto
https://dnsdumpster.com/
Dns dumper is a top tier tool I totally agree, check it out OP
RE: what scanners do you use to scan sites for vuln? - Money- - Nov 1, 2020
(Oct 30, 2020 05:25 PM)Whait Wrote: Those are really good scanners, but I'd recommend Nikto and DNSDumpster as well :
https://github.com/sullo/nikto
https://dnsdumpster.com/
Becareful with nikto tho , the user-agent gets detected easily etc.
Might wana randomize the user-agent while scanning. Won't be surpise 1 or 2 scan attempts ya got IP blacklisted.
Sides, manually fuzzing around web apps for exploits its even more fun than scanning which I know helps in saving time.
RE: what scanners do you use to scan sites for vuln? - drneed - Nov 1, 2020
(Nov 1, 2020 08:19 AM)Money- Wrote: Becareful with nikto tho , the user-agent gets detected easily etc.
Might wana randomize the user-agent while scanning. Won't be surpise 1 or 2 scan attempts ya got IP blacklisted.
Sides, manually fuzzing around web apps for exploits its even more fun than scanning which I know helps in saving time.
sometimes i don't know where to start, usually i go with a "Nmap scan vuln script"
and random other tools like sqlmap, nosqli, are these even useful. if theres a method you follow, would like to know
ps: ofc if you dont mind.
RE: what scanners do you use to scan sites for vuln? - G.P.D. - Nov 1, 2020
(Nov 1, 2020 08:19 AM)Money- Wrote: Becareful with nikto tho , the user-agent gets detected easily etc.
Might wana randomize the user-agent while scanning. Won't be surpise 1 or 2 scan attempts ya got IP blacklisted.
Sides, manually fuzzing around web apps for exploits its even more fun than scanning which I know helps in saving time.
True, manual fuzzing and checking is for me the best way of finding special vulns. I mainly use tools to find endpoints.
RE: what scanners do you use to scan sites for vuln? - vorticalbox - Nov 3, 2020
(Nov 1, 2020 12:56 PM)Whait Wrote: True, manual fuzzing and checking is for me the best way of finding special vulns. I mainly use tools to find endpoints.
Tools are great for marking off or finding low hanging fruit or finding potential spots for your to focus on.