Spoof Call and Spoof SMS set any caller ◆ Traffic service & campaign optimization ◆ ZexoCard: no-KYC virtual crypto cards ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › what scanners do you use to scan sites for vuln?

New Reply 

what scanners do you use to scan sites for vuln?
drneed
drneed Offline
[n00b@HF:]
*
Registered
Posts:
21
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 30, 2020 11:45 AM
OSINT probably..
-----------------------------------------------------------
10000days
10000days Offline
[user@HF:]
**
HF l33t
Posts:
275
Threads:
6
Credibility:
700
Popularity:
193
βytes:
β 0
Game XP:
9,294
Oct 30, 2020 03:29 PM
I'd recommend checking out:

- sqlmap
- OpenDoor
- WPScan
- XSStrike
G.P.D.
G.P.D. Offline
Gym. Putas. Dineros.
***
HF l33t
Posts:
610
Threads:
21
Credibility:
1501
Popularity:
723
βytes:
β 10,037.96
Game XP:
186
Oct 30, 2020 05:25 PM (This post was last modified: Oct 30, 2020 05:51 PM by G.P.D..)
(Oct 30, 2020 03:29 PM)10000days Wrote:  I'd recommend checking out:

- sqlmap
- OpenDoor
- WPScan
- XSStrike

Those are really good scanners, but I'd recommend Nikto and DNSDumpster as well :
https://github.com/sullo/nikto
https://dnsdumpster.com/
ButtermilkJesus
ButtermilkJesus Offline
[bin@HF:]
***
HF l33t
Posts:
558
Threads:
7
Credibility:
4100
Popularity:
457
βytes:
β 0
Game XP:
42,791
Nov 1, 2020 08:12 AM
(Oct 30, 2020 05:25 PM)G.P.D. Wrote:  Those are really good scanners, but I'd recommend Nikto and DNSDumpster as well :
https://github.com/sullo/nikto
https://dnsdumpster.com/

Dns dumper is a top tier tool I totally agree, check it out OP
Money-
Money- Offline
I Only Deal With Contracts/On-Site
**********
H4CK3R$
Posts:
7,823
Threads:
562
Credibility:
94202
Popularity:
2,351
βytes:
β 430,845.93
Game XP:
631,041
Nov 1, 2020 08:19 AM (This post was last modified: Nov 1, 2020 08:20 AM by Money-.)
(Oct 30, 2020 05:25 PM)G.P.D. Wrote:  Those are really good scanners, but I'd recommend Nikto and DNSDumpster as well :
https://github.com/sullo/nikto
https://dnsdumpster.com/

Becareful with nikto tho , the user-agent gets detected easily etc.
Might wana randomize the user-agent while scanning. Won't be surpise 1 or 2 scan attempts ya got IP blacklisted.

Sides, manually fuzzing around web apps for exploits its even more fun than scanning which I know helps in saving time.
[Image: j90qyxk.gif]
drneed
drneed Offline
[n00b@HF:]
*
Registered
Posts:
21
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Nov 1, 2020 12:12 PM
(Nov 1, 2020 08:19 AM)Money- Wrote:  Becareful with nikto tho , the user-agent gets detected easily etc.
Might wana randomize the user-agent while scanning. Won't be surpise 1 or 2 scan attempts ya got IP blacklisted.

Sides, manually fuzzing around web apps for exploits its even more fun than scanning which I know helps in saving time.

sometimes i don't know where to start, usually i go with a "Nmap scan vuln script"
and random other tools like sqlmap, nosqli, are these even useful. if theres a method you follow, would like to know

ps: ofc if you dont mind.
G.P.D.
G.P.D. Offline
Gym. Putas. Dineros.
***
HF l33t
Posts:
610
Threads:
21
Credibility:
1501
Popularity:
723
βytes:
β 10,037.96
Game XP:
186
Nov 1, 2020 12:56 PM
(Nov 1, 2020 08:19 AM)Money- Wrote:  Becareful with nikto tho , the user-agent gets detected easily etc.
Might wana randomize the user-agent while scanning. Won't be surpise 1 or 2 scan attempts ya got IP blacklisted.

Sides, manually fuzzing around web apps for exploits its even more fun than scanning which I know helps in saving time.

True, manual fuzzing and checking is for me the best way of finding special vulns. I mainly use tools to find endpoints.
vorticalbox
vorticalbox Offline
[bin@HF:]
***
HF l33t
Posts:
714
Threads:
22
Credibility:
000
Popularity:
51
βytes:
β 0
Game XP:
9,177
Nov 3, 2020 11:40 AM
(Nov 1, 2020 12:56 PM)G.P.D. Wrote:  True, manual fuzzing and checking is for me the best way of finding special vulns. I mainly use tools to find endpoints.

Tools are great for marking off or finding low hanging fruit or finding potential spots for your to focus on.
¸„»°'´¸„»°'´Vorticalbox `'°«„¸`'°«„¸
`'°«„¸¸„»°'´¸„»°'´`'°«„¸Scientia Potentia est ¸„»°'´`'°«„¸`'°«„¸¸„»°'´
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by L3ANDRINK3RSep 9, 2025 02:16 PM 3 192 Sep 9, 2025 02:16 PM
Last Post: pwningtheunpwned
by DrCrypterFeb 12, 2022 01:11 AM 1 311 Feb 12, 2022 01:11 AM
Last Post: Bryan Miller
by marenviss356Jan 20, 2022 09:10 AM 6 373 Jan 20, 2022 09:10 AM
Last Post: SIM-2501407