[gjariolg1657]

I am using sqlmap for sqli pentesting.
I wanna know the best tools for web server pentesting include sql injection.
let me know plz.
Thanks

[Sitrep]

Sqlmap for sql injection ofc, that's the working horse for that!
Mostly I use Burp suite for any webb app pentest and manual testing combined with that.
Nmap for port scanning and subfinder for subdomain enumeration, lastly aquatone for screenshots on the subdomains to find any possible subdomain takeovers.
But this is not server pentesting you're asking for, it's web application testing.

If you have a foothold on a server, that's a whole other set of tools you can use to totally own that system etc.

[кrew]

This question is so meh. Whats the right tool? It depends on the situation at hand.
Watch some STÖK videos
https://www.youtube.com/channel/UCQN2Dsj...g/featured

[vsi4k036]

This is a great list of tools for penetration testing: https://github.com/nahamsec/Resources-fo...s/tools.md
You can use Burp as your primary tool since there are many extensions there which will help you a lot.

[gjariolg1657]

This is a great list of tools for penetration testing: https://github.com/nahamsec/Resources-fo...s/tools.md
You can use Burp as your primary tool since there are many extensions there which will help you a lot.

Good answer for me
Thank you.

[Instamixes]

Hello Dear, You can try Netsparker.

[veiled]

Hello Dear, You can try Netsparker.

lawl big memelord here