+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Vulnerability scanners (/showthread.php?tid=6171929)
Vulnerability scanners - marenviss356 - Sep 9, 2021
Hello, what vulnerability scanners do you recommend. Of course free scanners and where it's work windows/linux etc?
RE: Vulnerability scanners - Beladonis - Sep 9, 2021
You have, among others, OpenVAS, Nikto and Owasp ZAP.
RE: Vulnerability scanners - SIM-5137958 - Jan 13, 2022
i find NMAP is easy to use as well, there are many scripts you can make use of
RE: Vulnerability scanners - AncientGod - Jan 14, 2022
I bet you already read it but: Manually testing is always better. For several reasons like learning, gaining experience and less false positives.
Most free scanners are trash. Owasp Zap is quite okay.
I can highly recommend Burpsuite Pro. But also Netsparker. Feel free to pm me for clean sources from other forums.
RE: Vulnerability scanners - marenviss356 - Jan 16, 2022
(Jan 14, 2022 04:50 PM)AncientGod Wrote: I bet you already read it but: Manually testing is always better. For several reasons like learning, gaining experience and less false positives.
Most free scanners are trash. Owasp Zap is quite okay.
I can highly recommend Burpsuite Pro. But also Netsparker. Feel free to pm me for clean sources from other forums.
pm me. I cant send message to you
RE: Vulnerability scanners - 5had0w.Cha53 - Jan 20, 2022
(Jan 14, 2022 04:50 PM)AncientGod Wrote: I bet you already read it but: Manually testing is always better. For several reasons like learning, gaining experience and less false positives.
Most free scanners are trash. Owasp Zap is quite okay.
I can highly recommend Burpsuite Pro. But also Netsparker. Feel free to pm me for clean sources from other forums.
That really depends on what your using it for. If you are a bug bounty hunter, you can use them in your automation work flow, to scan all of the subdomains for possible vulnerabilities over the night and then you manually go and check them out. You can then make a PoC for them, submit a bug, and then get that sweet hunter money!
I use OpenVas, Nuclei, and Zap.
RE: Vulnerability scanners - SIM-2501407 - Jan 20, 2022
(Sep 9, 2021 09:56 AM)Beladonis Wrote: You have, among others, OpenVAS, Nikto and Owasp ZAP.You must know what you’re doing; those are solid resources. I have never heard of OpenVAS; I’ll check it out.
OWASP Zap is the only one i have used out of that list and for being free, is great.
Gitlab has DAST for a cost but for static, it’s free. https://docs.gitlab.com/ee/user/application_security/sast/
May be worth using too.
What a grave dig on this thread btw. Bringing this back to life this month. Lmao