Open Source Web Application Vulnerability Scanner

English | Vietnamese

Rules

Main Forum

Portal

Member Listing

Statistics

Search

Reading Room
[Register]

Login [ | https ]

Forum Index

Thảo luận bảo mật

Open Source Web Application Vulnerability Scanner

[Utilities] Open Source Web Application Vulnerability Scanner	20/05/2012 20:42:13 (+0700) \| #1 \| 263623

hvthang
Member

Joined: 20/07/2005 03:26:58
Messages: 187
Offline

WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These details include the status of the scan, the number of URLs found on the web application, the number of vulnerabilities found and details of the vulnerabilities found.

After a scan is complete, a detailed PDF report is emailed to the user. The report includes descriptions of the vulnerabilities found, recommendations and details of where and how each vulnerability was exploited.

The vulnerabilities tested by WebVulScan are:
Reflected Cross-Site Scripting
Stored Cross-Site Scripting
Standard SQL Injection
Broken Authentication using SQL Injection
Autocomplete Enabled on Password Fields
Potentially Insecure Direct Object References
Directory Listing Enabled
HTTP Banner Disclosure
SSL Certificate not Trusted
Unvalidated Redirects

link: http://code.google.com/p/webvulscan/downloads/list

[Utilities] Open Source Web Application Vulnerability Scanner	20/05/2012 22:00:23 (+0700) \| #2 \| 263624

Boy95
Member

Joined: 23/10/2011 08:08:30
Messages: 35
Location: BR-VT
Offline

Thanks nha. Có điều phần mềm WebVulScan này mặc dầu quét cũng được rất nhiều lỗi bảo mật , và còn tự động gửi mail cho ta nữa. Nhưng sao lại PDF. Anh có bản nào file *.txt luôn không. Khỏi phải đụng tay đánh đá cái file PDF. Cảm ơn anh nhiều.

Sống vì "bản thân", đừng vì "cá nhân".
---Tôi.addCommand(new Command("Đi về phí trước",Command.OK,0));--

[Utilities] Open Source Web Application Vulnerability Scanner	21/05/2012 00:48:32 (+0700) \| #3 \| 263627

hackerngheo
Member

Joined: 15/08/2009 19:47:29
Messages: 45
Offline

Warning: require_once(/scanner/functions/databaseFunctions.php) [function.require-once]: failed to open stream: No such file or directory in /opt/lampp/htdocs/webvulscan_v0.11/index.php on line 45

Fatal error: require_once() [function.require]: Failed opening required '/scanner/functions/databaseFunctions.php' (include_path='.:/opt/lampp/lib/php') in /opt/lampp/htdocs/webvulscan_v0.11/index.php on line 45

bị lỗi thế này ai biết giúp dùm

[Utilities] Open Source Web Application Vulnerability Scanner	22/05/2012 07:21:24 (+0700) \| #4 \| 263726

Cydefense
Member

Joined: 19/05/2012 23:44:30
Messages: 1
Offline

hackerngheo wrote:

Warning: require_once(/scanner/functions/databaseFunctions.php) [function.require-once]: failed to open stream: No such file or directory in /opt/lampp/htdocs/webvulscan_v0.11/index.php on line 45

Fatal error: require_once() [function.require]: Failed opening required '/scanner/functions/databaseFunctions.php' (include_path='.:/opt/lampp/lib/php') in /opt/lampp/htdocs/webvulscan_v0.11/index.php on line 45

bị lỗi thế này ai biết giúp dùm

File /scanner/functions/databaseFunctions.php không tồn tại bạn ạ.

[Utilities] Open Source Web Application Vulnerability Scanner	22/05/2012 08:08:00 (+0700) \| #5 \| 263731

Ne08x
Member

Joined: 22/02/2009 02:16:17
Messages: 1
Offline

File databaseFuntions.php này có tồn tại đó bạn. Theo như log bắn ra thì đường dẫn của nó trên máy bạn là: /opt/lampp/htdocs/webvulscan_v0.11/scanner/functions/databaseFunctions.php. Bạn sửa đường dẫn trên file index.php và một số file nữa là được smilie

Go to:

Users currently in here
1 Anonymous