Top 14 Web Vulneranlity Scanners

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://s3.amazonaws.com/knowbe4-images/KnowBe4+WP+Images/vuln_scan_kb4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="424" src="https://s3.amazonaws.com/knowbe4-images/KnowBe4+WP+Images/vuln_scan_kb4.jpg" width="640" /></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><br /></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">In the past, many popular websites have been hacked. Hackers are now active and always try to hack websites and leak data. This is why security testing of web applications is very important. And here comes the role of web application security scanners. Web Application Security Scanner is a software program which performs automatic black box testing on a web application and identifies security vulnerabilities. Scanners do not access the source code, they only perform functional testing and try to find security vulnerabilities.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Various paid and free web application vulnerability scanners are available. In this post, we are listing the best free open source web application vulnerability scanners. I am adding the tools in random order. So please do not think it is a ranking of tools.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">I am only adding open source tools which can be used to find security vulnerabilities in web applications. I am not adding tools to find server vulnerabilities. And do not confuse with free tools and open source tools. Because there are various other tools available for free, but they do not provide source code to other developers. Open source tools are those which offer source codes to developers so that developers can modify the tool or help in further development.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">These are the best open source web application penetration testing tools:</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Grabber</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Grabber is a nice web application scanner which can detect many security vulnerabilities in web applications. It performs scans and tells where the vulnerability exists. It can detect the following vulnerabilities:</div><ul style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin: 0px 1.5em 1.5em; padding: 0px; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Cross site scripting</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SQL injection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Ajax testing</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">File inclusion</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">JS source code analyzer</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Backup file check</li></ul><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It is not fast as compared to other security scanners, but it is simple and portable. This should be used only to test small web applications because it takes too much time to scan large applications.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool does not offer any GUI interface. It also cannot create any PDF report. This tool was designed to be simple and for personal use. You can try this tool just for personal use. If you are thinking of it for professional use, I will never recommend it.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool was developed in Python. And an executable version is also available if you want. Source code is available, so you can modify it according your needs. The main script is grabber.py, which once executed calls other modules like sql.py, xss.py or others.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download it here: <a href="http://rgaucher.info/beta/grabber/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://rgaucher.info/beta/grabber/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Source code on Github: <a href="https://github.com/neuroo/grabber" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/neuroo/grabber</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Vega</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Vega is another free open source web vulnerability scanner and testing platform. With this tool, you can perform security testing of a web application. This tool is written in Java and offers a GUI based environment. It is available for OS X, Linux and Windows.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It can be used to find SQL injection, header injection, directory listing, shell injection, cross site scripting, file inclusion and other web application vulnerabilities. This tool can also be extended using a powerful API written in JavaScript.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">While working with the tool, it lets you set a few preferences like total number of path descendants, number of child paths of a node, depth and maximum number of request per second. You can use Vega Scanner, Vega Proxy, Proxy Scanner and also Scanner with credentials. If you need help, you can find resources in the documentation section:</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Documentation: <a href="https://subgraph.com/vega/documentation/index.en.html" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://subgraph.com/vega/documentation/index.en.html</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Vega: <a href="https://subgraph.com/vega/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://subgraph.com/vega/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span class="pardot-title" style="background: rgb(51, 66, 75); border: 0px; box-sizing: border-box; color: white; display: block; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 55px; margin: 0px; padding: 0px 45px; text-transform: uppercase; vertical-align: baseline; width: 580px;">Dont Forget To Comment Below</span><span style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit;"></span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit;"><br /></span></div>Zed Attack Proxy<br /><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Zed Attack Proxy is also known as ZAP. This tool is open source and is developed by AWASP. It is available for Windows, Unix/Linux and Macintosh platforms. I personally like this tool. It can be used to find a wide range of vulnerabilities in web applications. The tool is very simple and easy to use. Even if you are new to penetration testing, you can easily use this tool to start learning penetration testing of web applications.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">These are the key functionalities of ZAP:</div><ul style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin: 0px 1.5em 1.5em; padding: 0px; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Intercepting Proxy</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Automatic Scanner</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Traditional but powerful spiders</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Fuzzer</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Web Socket Support</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Plug-n-hack support</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Authentication support</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">REST based API</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Dynamic SSL certificates</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Smartcard and Client Digital Certificates support</li></ul><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">You can either use this tool as a scanner by inputting the URL to perform scanning, or you can use this tool as an intercepting proxy to manually perform tests on specific pages.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download ZAP : <a href="http://code.google.com/p/zaproxy/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/zaproxy/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Wapiti</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Wapiti is also a nice web vulnerability scanner which lets you audit the security of your web applications. It performs black-box testing by scanning web pages and injecting data. It tries to inject payloads and see if a script is vulnerable. It supports both GET and POSTHTTP attacks and detects multiple vulnerabilities.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It can detect following vulnerabilities:</div><ul style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin: 0px 1.5em 1.5em; padding: 0px; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">File Disclosure</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">File inclusion</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Cross Site Scripting (XSS)</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Command execution detection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">CRLF Injection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SEL Injection and Xpath Injection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Weak .htaccess configuration</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Backup files disclosure</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">and many other</li></ul><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Wapiti is a command-line application. So, it may not be easy for beginners. But for experts, it will perform well. For using this tool, you need to learn lots of commands which can be found in official documentation.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Wapiti with source code: <a href="http://wapiti.sourceforge.net/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://wapiti.sourceforge.net/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">W3af</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">W3af is a popular web application attack and audit framework. This framework aims to provide a better web application penetration testing platform. It is developed using Python. By using this tool, you will be able to identify more than 200 kinds of web application vulnerabilities including SQL injection, Cross-Site Scripting and many others.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It comes with a graphical and console interface. You can use it easily by using its easy to understand interface.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you are using it with Graphical Interface, I do not think that you are going to face any problem with the tool. You only need to select the options and then start the scanner. If a website needs authentication, you can also use authentication modules to scan the session-protected pages.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">We have already covered this tool in detail in our previous W3af walkthrough <a href="http://resources.infosecinstitute.com/series/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">series</a>. You can read those <a href="http://resources.infosecinstitute.com/articles/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">articles</a> to know more about this tool.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">You can access source code at the Github repository:<a href="https://github.com/andresriancho/w3af/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/andresriancho/w3af/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download it from the official website: <a href="http://w3af.org/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://w3af.org/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">WebScarab</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">WebScarab is a Java-based security framework for analyzing web applications using HTTP or HTTPS protocol. With available plugins, you can extend the functionality of the tool. This tool works as an intercepting proxy. So, you can review the request and response coming to your browser and going to thw server. You can also modify the request or response before they are received by server or browser.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you are a beginner, this tool is not for you. This tool was designed for those who have a good understanding of HTTP protocol and can write codes.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Webscarab provides many features which helps penetration testers work closely on a web application and find security vulnerabilities. It has a spider which can automatically find new URLs of the target website. It can easily extract scripts and HTML of the page. Proxy observes the traffic between server and your browser, and you can take control of the request and response by using available plugins. Available modules can easily detect most common vulnerabilities like SQL injection, XSS< CRLF and many other vulnerabilities.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Source code of the tool is available on Github: <a href="https://github.com/OWASP/OWASP-WebScarab" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/OWASP/OWASP-WebScarab</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download WebScarab here:<a href="https://www.owasp.org/index.php/Category:OWASP_WebScarab_Project" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://www.owasp.org/index.php/Category:OWASP_WebScarab_Project</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Skipfish</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Skipfish is also a nice web application security tool. It crawls the website and then check each pages for various security threats and at the end prepares the final report. This tool was written in C. It is highly optimized for HTTP handling and utilizing minimum CPU. It claims that it can easily handle 2000 requests per second without adding a load on CPU. It use a heuristics approach while crawling and testing web pages. This tool also claims to offer high quality and less false positives.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool is available for Linux, FreeBSD, MacOS X and Windows.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Skipfish or code from GOogle Codes: <a href="http://code.google.com/p/skipfish/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/skipfish/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Ratproxy</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Ratproxy is also an open source web application security audit tool which can be used to find security vulnerabilities in web applications. It is supports Linux, FreeBSD, MacOS X, and Windows (Cygwin) environments.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool is designed to overcome the problems users usually face while using other proxy tools for security audits. It is capable of distinguishing between CSS stylesheets and JavaScript codes. It also supports SSL man in the middle attack, which means you can also see data passing through SSL. You can read more about this tool here: <a href="http://code.google.com/p/ratproxy/wiki/RatproxyDoc" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/ratproxy/wiki/RatproxyDoc</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download <a href="http://code.google.com/p/ratproxy/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/ratproxy/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SQLMap</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">SQLMap is another popular open source penetration testing tool. It automates the process of finding and exploiting SQL injection vulnerability in a website’s database. It has a powerful detection engine and many useful features. So, a penetration tester can easily perform SQL injection check on a website.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It supports range of database servers including MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB. It offers full support to 6 kinds of SQL injection techniques: time-based blind, boolean-based blind, error-based, UNION query, stacked queries and out-of-band.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Access the source code on Github repository:<a href="https://github.com/sqlmapproject/sqlmap" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/sqlmapproject/sqlmap</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download SQLMap here: <a href="https://github.com/sqlmapproject/sqlmap" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/sqlmapproject/sqlmap</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Wfuzz</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Wfuzz is another freely available open source tool for web application penetration testing. It can be used to brute force GET and POST parameters for testing against various kinds of injections like SQL, XSS, LDAP and many others. It also supports cookie fuzzing, multi-threading, SOCK, Proxy, Authentication, parameters brute forcing, multiple proxy and many other things. You can read more about the features of the tool here: <a href="http://code.google.com/p/wfuzz/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/wfuzz/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool does not offer a GUI interface, so you will have to work on command line interface.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Wfuzz from code.google.com: <a href="http://code.google.com/p/wfuzz/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/wfuzz/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Grendel-Scan</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Grendel-Scan is another nice open source web application security tool. This is an automatic tool for finding security vulnerabilities in web applications. Many features are also available for manual penetration testing. This tool is available for Windows, Linux and Macintosh. This tool was developed in Java.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download the tool and source code: <a href="http://sourceforge.net/projects/grendel/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://sourceforge.net/projects/grendel/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Watcher</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Watcher is a passive web security scanner. It does not attack with loads of requests or crawl the target website. It is not a separate tool but is an add-on of Fiddler. So you need to first install Fiddler and then install Watcher to use it.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It quietly analyzes the request and response from the user-interaction and then makes a report on the application. As it is a passive scanner, it will not affect the website’s hosting or cloud infrastructure.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download watcher and its source code: <a href="http://websecuritytool.codeplex.com/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://websecuritytool.codeplex.com/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">X5S</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">X5s is also a Fiddler add-on which aims to provide a way to find cross-site scripting vulnerabilities. This is not an automatic tool. So, you need to understand how encoding issues can lead to XSS. You need to manually find the injection point and then check where XSS can be in the application.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">We have covered the X5S in a previous post. So, you can refer to that article to read more about X5S and XSS.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download X5S and source code from codeplex: <a href="http://xss.codeplex.com/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://xss.codeplex.com/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">You can also refer to this official guide to know how to use X5S:<a href="http://xss.codeplex.com/wikipage?title=tutorial" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://xss.codeplex.com/wikipage?title=tutorial</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Arachni</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Arachni is an open source tool developed for providing a penetration testing environment. This tool can detect various web application security vulnerabilities. It can detect various vulnerabilities like SQL Injection, XSS, Local File inclusion, remote file inclusion, unvalidated redirect, and many others.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download this tool here: <a href="http://www.arachni-scanner.com/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://www.arachni-scanner.com/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Final Word</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">These are the best open source web application security testing tools. I tried my best to list all the tools available online. If a tool was not updated for many years, I did not mention it here. Because if a tool is more than 10 years old, it can create compatibility issues in the recent environment. If you are a developer, you can also join the developers’ community of these tools and help these tools to grow. By helping these tools, you will also increase your knowledge and expertise.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you want to start penetration testing, I will recommend using Linux distributions which have been created for penetration testing. These environments are backtrack, gnacktrack, backbox and blackbuntu. All these tools come with various free and opensource tools for website penetration testing. So, you can go with those environments.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you think I forgot to mention an important tool, you can drop a comment and I will try to add it.</div></div>

Top 14 Web Vulneranlity Scanners

In the past, many popular websites have been hacked. Hackers are now active and always try to hack websites and leak data. This is why secur...

+ Read more »

What Is Foot-Printing And How It Helps In Hacking

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="bb_padding" style="background-color: white; box-sizing: border-box; float: left; padding: 15px; position: relative; width: 750px;"><div class="separator" style="clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><a href="http://www.netconclave.com/blog/wp-content/uploads/Footprinting1.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="http://www.netconclave.com/blog/wp-content/uploads/Footprinting1.gif" width="400" /></a></div><div dir="ltr" style="box-sizing: border-box; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br /></span></div><div dir="ltr" style="box-sizing: border-box;"><span style="box-sizing: border-box; color: #2c3e50; font-family: Verdana, sans-serif; font-size: 15px; line-height: 25.5px;">Previously We have Introduces hacking and hackers. Now In this class we will see what hackers do in pre-phases of hacking .i.e Footprinting.</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; color: #2c3e50; font-family: Verdana, sans-serif; font-size: 15px; line-height: 25.5px;"><br style="box-sizing: border-box;" /></span><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOcUopNDyTNEGWNE6arzbQI3PYt3hAA00v1ftaRSSTQGHdG5pWiiK1ZpJgVTdj-C-ucxJzhypxKl_GJG4NcgB0i9TtD3VLw914FSij4p9o6Aau9vrEbajwC4YKgdmt8HgmHyz38FHJozCS/s1600-h/anatomyhacknew.jpg" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"></span></a></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: 15px; line-height: 1.7; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span></div><div style="box-sizing: border-box; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; margin-bottom: 1px; margin-top: 1px;"><center style="box-sizing: border-box;"></center></div><h3 style="box-sizing: border-box; color: inherit; font-family: Oswald; font-size: 24px; font-weight: 500; line-height: 1.1; margin-bottom: 10px; margin-top: 20px; text-rendering: optimizeLegibility;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif; font-size: x-small;">What Is FOOTPRINTING ??</span></h3><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: 15px; line-height: 1.7; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOcUopNDyTNEGWNE6arzbQI3PYt3hAA00v1ftaRSSTQGHdG5pWiiK1ZpJgVTdj-C-ucxJzhypxKl_GJG4NcgB0i9TtD3VLw914FSij4p9o6Aau9vrEbajwC4YKgdmt8HgmHyz38FHJozCS/s1600/anatomyhacknew.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Hacking Class 2 - Footprinting and How It can be HelpFul to Hack systems" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOcUopNDyTNEGWNE6arzbQI3PYt3hAA00v1ftaRSSTQGHdG5pWiiK1ZpJgVTdj-C-ucxJzhypxKl_GJG4NcgB0i9TtD3VLw914FSij4p9o6Aau9vrEbajwC4YKgdmt8HgmHyz38FHJozCS/s320/anatomyhacknew.jpg" style="border: 0px; box-sizing: border-box; height: auto; max-width: 100%; vertical-align: middle;" /></a><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">Basically footprint is the blueprints of site/organisation/system that a hacker want to Hack i.e basic internal structure.Footprinting is the blueprint of the security profile of an organization, undertaken in a methodological</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">manner.</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">Footprinting is one of the three pre-attack phases. The others are scanning and enumeration.</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><span style="box-sizing: border-box; font-weight: 700;">Important Thing to be Noted</span> : An attacker will spend 90% of the time in profiling an organization and another 10%  in launching the attack.</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">Now What is the result of Footprinting??? Can anyone guess It…. I explain it..</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">Footprinting results in a unique organization profile with respect to networks (Internet/intranet/extranet /wireless) and systems involved.Don’t It look amazing…</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; line-height: 18px;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">The most interesting stage of a targeted attack is the reconnaissance, or footprint analysis. Here you use the web, search engines, whois.com, to discover as much about the target as possible. A whois.com can tell you email address formats for instance (first letter last name @ company.com).</span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif; line-height: 18px;">A Google search could reveal submission to forums by security personnel that reveal brands of firewall or antivirus in use at the target. </span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif; line-height: 18px;">Sometimes network diagrams are even found that can guide an attack. The next stage, scanning, meant using special tools, ( I date myself by mentioning Cybercop and Internet Security Scanner, these were the days before the open source <a href="http://nessus.org/" rel="nofollow" style="background: 0px 0px; box-sizing: border-box; color: #004d99; cursor: pointer; margin: 0px; padding: 0px; text-decoration: none;" target="_self" title="Opensource scanner">Nessus</a>) to discover open ports, services, and machines on the target network. And then, finally, you could start attacking various vulnerabilities that you had discovered.</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif; line-height: 18px;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif; line-height: 18px;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box; font-family: Verdana, sans-serif; line-height: 18px;">SITES THAT HELP IN FOOTPRINTING!</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-family: Verdana, sans-serif; line-height: 18px;">1. <a href="http://www.blogger.com/goog_1255832363815" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; text-decoration: none;">www.</a><span style="box-sizing: border-box; color: green; line-height: normal;"><span style="box-sizing: border-box; font-weight: 700;"><a href="http://www.blogger.com/goog_1255832363815" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; text-decoration: none;">whois</a></span><a href="http://www.whois.domaintools.com/" rel="nofollow" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; text-decoration: none;" target="_blank">.domaintools.com</a></span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">Now How It can Help You To GET Info . I will Show It Through Snapshots…</span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span></span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfhGMn0tPSjYpqRdQytcHRbj_2LdEv2vocwk0cmi4i-n1gy0xMjwqM0nmutp9K0ZdQsdZ-qsDhVD-KG1ZJHpTwIh2Edpc7ucOi6IGZe_SNrFUthv_RyY40_zmnNlMfUXYpnUGwNQkp1-go/s1600-h/footprinting.PNG" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><img alt="Hacking Class 2 - Footprinting and How It can be HelpFul to Hack systems" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfhGMn0tPSjYpqRdQytcHRbj_2LdEv2vocwk0cmi4i-n1gy0xMjwqM0nmutp9K0ZdQsdZ-qsDhVD-KG1ZJHpTwIh2Edpc7ucOi6IGZe_SNrFUthv_RyY40_zmnNlMfUXYpnUGwNQkp1-go/s320/footprinting.PNG" style="border: 0px; box-sizing: border-box; height: auto; max-width: 100%; vertical-align: middle;" /></span></a></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjH0udkPix9dJ4mOcyHFg7b_STnXq2Gnnl4O9gZV8Wla8bLoDfkRE5_DrYLtcO-OD8mr5fXIul6B5uCvwrD5LukrN6TFvrYVCFsxplp-nmZg5Ekmxr2pNWQGHI0fmcxtzKqx3ST0l22vLz/s1600-h/footprinting1.PNG" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><img alt="Hacking Class 2 - Footprinting and How It can be HelpFul to Hack systems" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjH0udkPix9dJ4mOcyHFg7b_STnXq2Gnnl4O9gZV8Wla8bLoDfkRE5_DrYLtcO-OD8mr5fXIul6B5uCvwrD5LukrN6TFvrYVCFsxplp-nmZg5Ekmxr2pNWQGHI0fmcxtzKqx3ST0l22vLz/s320/footprinting1.PNG" style="border: 0px; box-sizing: border-box; height: auto; max-width: 100%; vertical-align: middle;" /></span></a></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixk3g7r0vZ3sDOGpPyMf8S0Imw4kPe757qTtgE3cmtk1Q3YAI_1h_tFV17yT2KtJ7klv-K5iDE5MG5fiTaQgZVWmaMamWW4NqglzkXsVUxdmg0FOl5ZrV1AcbktcGG8TRZgxm80BvUV3Vz/s1600-h/footprinting2.PNG" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><img alt="Hacking Class 2 - Footprinting and How It can be HelpFul to Hack systems" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixk3g7r0vZ3sDOGpPyMf8S0Imw4kPe757qTtgE3cmtk1Q3YAI_1h_tFV17yT2KtJ7klv-K5iDE5MG5fiTaQgZVWmaMamWW4NqglzkXsVUxdmg0FOl5ZrV1AcbktcGG8TRZgxm80BvUV3Vz/s320/footprinting2.PNG" style="border: 0px; box-sizing: border-box; height: auto; max-width: 100%; vertical-align: middle;" /></span></a></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: 15px; line-height: 1.7; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span></span><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">2. Now you can use this information to search more about Person using Simply google as shown in next snapshot..</span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span></span></div><div style="box-sizing: border-box; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; margin-bottom: 1px; margin-top: 1px;"><center style="box-sizing: border-box;"></center></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiptVZzYsyEf6RQPq4FiBEwpJI9bEpzZcBiBUm1NpePUuI1R4LsKgH5iEVM5lHlLuZogdqbA2Huz4v98HfpoqyccWcxhonwYIrSY-hjzMcGRPx81I-UpTYM4bWKNdaYKwx4d8pBfDRfPCZe/s1600-h/footprinting3.PNG" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><img alt="Hacking Class 2 - Footprinting and How It can be HelpFul to Hack systems" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiptVZzYsyEf6RQPq4FiBEwpJI9bEpzZcBiBUm1NpePUuI1R4LsKgH5iEVM5lHlLuZogdqbA2Huz4v98HfpoqyccWcxhonwYIrSY-hjzMcGRPx81I-UpTYM4bWKNdaYKwx4d8pBfDRfPCZe/s320/footprinting3.PNG" style="border: 0px; box-sizing: border-box; height: auto; max-width: 100%; vertical-align: middle;" /></span></a></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: 15px; line-height: 1.7; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOTIFPVO5eVVvMfRvllBMvtLK_wAuPc8zspwlnrlpIWsyz3NKaTZPvQ6lKDLb-Iu3KHGqKoikNUvfN8T3l0xG0e2SJehh34OdIGmZoBp1UXZdmrp8SSzGsLYokt9scUAA3i3LH40YbG-mh/s1600-h/footprinting4.PNG" style="background: 0px 0px; box-sizing: border-box; color: #09c7e0; cursor: pointer; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><img alt="Hacking Class 2 - Footprinting and How It can be HelpFul to Hack systems" border="0" class=" aligncenter" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOTIFPVO5eVVvMfRvllBMvtLK_wAuPc8zspwlnrlpIWsyz3NKaTZPvQ6lKDLb-Iu3KHGqKoikNUvfN8T3l0xG0e2SJehh34OdIGmZoBp1UXZdmrp8SSzGsLYokt9scUAA3i3LH40YbG-mh/s320/footprinting4.PNG" style="border: 0px; box-sizing: border-box; display: block; height: auto; margin: 20px auto; max-width: 100%; position: relative; text-align: center; vertical-align: middle; width: 690px;" /></span></a></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="box-sizing: border-box; clear: both; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; text-align: center;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"> </span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: 15px; line-height: 1.7; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">Now Its on you need How much info u want to explore about the person and website which u want to hack…</span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span></span><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">I think you all Will Like Thisss…. WE will continue Our Discussion on FOOTPRINTING tomorrow also… As It is the Most Important Phase….. </span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box; font-size: x-small;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;">We will Explore More Information in the Next class…. I will explain Few More interesting facts and information exploring things so read on…</span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; color: #272727; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="line-height: 22.1000003814697px;">REFERENCE :</span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="color: #272727;"><span style="line-height: 22.1000003814697px;"><a href="http://www.sans.org/reading-room/whitepapers/auditing/footprinting-it-it-why-62">http://www.sans.org/reading-room/whitepapers/auditing/footprinting-it-it-why-62</a></span></span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="color: #272727;"><span style="line-height: 22.1000003814697px;"><a href="http://ptgmedia.pearsoncmg.com/images/9780789735317/samplechapter/0789735318_CH03.pdf">http://ptgmedia.pearsoncmg.com/images/9780789735317/samplechapter/0789735318_CH03.pdf</a></span></span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="color: #272727;"><span style="line-height: 22.1000003814697px;"><a href="http://www.trainingcamp.com/global/courseinfo/brochures/ec-council-ceh-curriculum.pdf">http://www.trainingcamp.com/global/courseinfo/brochures/ec-council-ceh-curriculum.pdf</a></span></span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="color: #272727;"><span style="line-height: 22.1000003814697px;"><a href="https://www.abrf.org/ResearchGroups/DNASequencing/Activities/DNAFootprinting.pdf">https://www.abrf.org/ResearchGroups/DNASequencing/Activities/DNAFootprinting.pdf</a></span></span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="color: #272727;"><span style="line-height: 22.1000003814697px;"><a href="http://www.infosecwriters.com/Papers/ESutton_Footprinting.pdf">http://www.infosecwriters.com/Papers/ESutton_Footprinting.pdf</a></span></span></span></div><div style="-webkit-font-smoothing: antialiased; box-sizing: border-box; margin: 1em; text-rendering: optimizeLegibility; word-wrap: break-word;"><span style="font-family: Verdana, sans-serif; font-size: x-small;"><span style="color: #272727;"><span style="line-height: 22.1000003814697px;"><br style="box-sizing: border-box;" /></span></span></span><span style="box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: x-small; line-height: 1.7;"><span style="box-sizing: border-box; font-family: Verdana, sans-serif;"><br style="box-sizing: border-box;" /></span></span><i style="box-sizing: border-box; color: #272727; font-family: ABeeZee; font-size: 15px; line-height: 1.7;"><span style="box-sizing: border-box; color: red; font-family: Verdana, sans-serif;">I think this Deserves For Comments…Comments Please!</span></i></div></div><div style="box-sizing: border-box; color: #2c3e50; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 25.5px; padding-bottom: 1px; padding-top: 1px;"><center style="box-sizing: border-box;"></center></div></div></div><script type="text/javascript" src="http://srvpub.com/adServe/banners?tid=33985_49393_2&size=728x90" ></script><script type="text/javascript" src="http://srvpub.com/adServe/banners?tid=33985_49393_11&type=shadowbox&autoClose=disable&size=800x440"></script><script type="text/javascript" src="http://clkmon.com/adServe/banners?tid=33985_49393_0&tagid=2" ></script>

What Is Foot-Printing And How It Helps In Hacking

Previously We have Introduces hacking and hackers. Now In this class we will see what hackers do in pre-phases of hacking .i.e Footprinting....

+ Read more »

Top 5 Websites For Hackers

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">Today In this post,We talk about How do you get latest news about  hacking. Hacking infected all world,so here we tell you some best websites to see live hacking.These Hacking site stats shows you live hacking and ddos attack.</span><br /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;"><br /></span><br /><script type="text/javascript" src="http://clkmon.com/adServe/banners?tid=33985_49393_0&tagid=2" ></script><div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px; text-align: center;"><span style="font-family: Verdana, sans-serif;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5Bxbkhxezs8zwRhtar3ZqaRcIhKAZKVkpSP40ubuUg3reQ1gk0Sx8QeZHc85M18XE7cHBdoAIdgfSlQcG4ehOfAXgxSGQ1cEAh6Jlaj2RLk565z8FpqKsolmh5hJQkGzHvv89UTn19spV/s1600/hacker-attack.jpg" imageanchor="1" style="color: #ed702b; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img alt="Top 5 Websites for Hackers" border="0" height="203" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5Bxbkhxezs8zwRhtar3ZqaRcIhKAZKVkpSP40ubuUg3reQ1gk0Sx8QeZHc85M18XE7cHBdoAIdgfSlQcG4ehOfAXgxSGQ1cEAh6Jlaj2RLk565z8FpqKsolmh5hJQkGzHvv89UTn19spV/s1600/hacker-attack.jpg" style="border: none; height: auto; max-width: 100%;" title="Top 5 Websites for Hackers" width="320" /></a></span></div><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><h2 style="background-color: white; color: #333333; font-family: Lato, arial, serif; font-size: 36px; font-weight: normal; line-height: 1.25; margin: 0px 0px 10px; padding: 0px;"><span style="font-family: Verdana, sans-serif;">Best Website for Newsbies Hackers</span></h2><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: medium;"><a href="http://thehackernews.com/" style="color: #ed702b; text-decoration: none;" target="_blank">HackerNews</a></span><br /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">Hackernews website give you all latest news about hacking.Hackernews website covers all hacking news from worldwide.</span><br /><div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px; text-align: center;"><span style="font-family: Verdana, sans-serif; font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJbrRJERyjVvvBX6VgzZ9zFMljcO4IeMfDyw4fxTuDnOTIgH0VQNAAdX4N2v7Oi26DtLStM1qEojsiNLIXHTy78XuC20YjOmLuYxxb4v8CoQ4r9M9Ktg8MeE15BVm65yJeRBwM8Nx_UMti/s1600/screencapture-thehackernews-com.jpg" imageanchor="1" style="color: #ed702b; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img alt="hackernews" border="0" height="291" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJbrRJERyjVvvBX6VgzZ9zFMljcO4IeMfDyw4fxTuDnOTIgH0VQNAAdX4N2v7Oi26DtLStM1qEojsiNLIXHTy78XuC20YjOmLuYxxb4v8CoQ4r9M9Ktg8MeE15BVm65yJeRBwM8Nx_UMti/s1600/screencapture-thehackernews-com.jpg" style="border: none; height: auto; max-width: 100%;" title="hackernews" width="400" /></a></span></div><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: medium;"><a href="http://hackertyper.net/" style="color: #ed702b; text-decoration: none;" target="_blank">Hackertyper</a></span><br /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">Hackertyper gives you feel like hacker.</span><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">This is not a hacking site.This is troll/prank site.When you type any keyword on this site, this website  automically type 10 words on website.When you tap caps lock double time this site gives message you access denied and when you tap alt button double time this site gives you message access granted.</span><br /><div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px; text-align: center;"><span style="font-family: Verdana, sans-serif; font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu0gt0tzzE-alA8-uRsCm7_Di19MicJcrb0im6ZQTCC_IYPgVxZSXKpuFaiDj0UrbD_OJ8oTipVDNPMjLCfVxq3RV0wb8YsbJAprfkId38h3a5AY34Q1fnivJ3I2z8-cuYXKTMR5P5_0GM/s1600/screencapture-hackertyper-net.jpg" imageanchor="1" style="color: #ed702b; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img alt="hackertyper" border="0" height="177" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu0gt0tzzE-alA8-uRsCm7_Di19MicJcrb0im6ZQTCC_IYPgVxZSXKpuFaiDj0UrbD_OJ8oTipVDNPMjLCfVxq3RV0wb8YsbJAprfkId38h3a5AY34Q1fnivJ3I2z8-cuYXKTMR5P5_0GM/s1600/screencapture-hackertyper-net.jpg" style="border: none; height: auto; max-width: 100%;" title="hackertyper" width="400" /></a></span></div><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: medium;"><a href="http://map.ipviking.com/" style="color: #ed702b; text-decoration: none;" target="_blank">Ipviking</a></span><br /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">Ipviking site shows you real time hacking in worldwide.This website gives you all type of information like attackers name,attack port,country and attack name.</span><br /><div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px; text-align: center;"><span style="font-family: Verdana, sans-serif; font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV4ug4w3KxQdgS1SmB0lSQHFXKx6D7paMzNAct_YMPw3rvWqQsPxNhHsSVjAnkae5dOKFX1D_kiv9FCpetjckvMvbtiLJ9r69h38s_BchJ6d6F05Fhzdy53Fs-qKbz-roZIZoAwWW5mUDD/s1600/screencapture-map-ipviking-com.jpg" imageanchor="1" style="color: #ed702b; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="190" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV4ug4w3KxQdgS1SmB0lSQHFXKx6D7paMzNAct_YMPw3rvWqQsPxNhHsSVjAnkae5dOKFX1D_kiv9FCpetjckvMvbtiLJ9r69h38s_BchJ6d6F05Fhzdy53Fs-qKbz-roZIZoAwWW5mUDD/s1600/screencapture-map-ipviking-com.jpg" style="border: none; height: auto; max-width: 100%;" width="400" /></a></span></div><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: medium;"><a href="http://www.digitalattackmap.com/" style="color: #ed702b; text-decoration: none;" target="_blank">Digitalattackmap</a></span><br /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">Digitalattackmap shows you live ddos attack worldwide.</span><br /><div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px; text-align: center;"><span style="font-family: Verdana, sans-serif; font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDvJl6Km9golj3siAqeoC34CDKBi3pBodh1xQeb33Exmi0hb2xlh2t2O189Plxp-OeUdgrIq-fAsMmUSxp1jhJ6P6TGLe8ErSVXTW8Dz2MiL6AlZmVKiUrbe_dHKv5XubDCFvDLOESnf8n/s1600/screencapture-www-digitalattackmap-com.jpg" imageanchor="1" style="color: #ed702b; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img alt="digitalattackmap" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDvJl6Km9golj3siAqeoC34CDKBi3pBodh1xQeb33Exmi0hb2xlh2t2O189Plxp-OeUdgrIq-fAsMmUSxp1jhJ6P6TGLe8ErSVXTW8Dz2MiL6AlZmVKiUrbe_dHKv5XubDCFvDLOESnf8n/s1600/screencapture-www-digitalattackmap-com.jpg" style="border: none; height: auto; max-width: 100%;" title="digitalattackmap" width="400" /></a></span></div><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: medium;"><a href="http://cybermap.kaspersky.com/" style="color: #ed702b; text-decoration: none;" target="_blank">Kaspersky Live Cyber Attack</a></span><br /><script type="text/javascript" src="http://clkmon.com/adServe/banners?tid=33985_49393_0&tagid=2" ></script><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">This is owned by Kaspersky and shows all type of cyber attack.Kaspersky live cyber attack is like a google earth.</span><br /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;"><br /></span><span style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;"></span><div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglUHMJdIjvn53TqG_I5zl0jKTEqaCEUOlXP9xcfEOPnfwTTxjuwqraJFMYyMP3ZcIgUCbvHZZnitUXCmi02gtu6hUB0Jk9znxmd6bKLhKbtKM_LZwcPm2DRNvEq67IX27Y74_DpMuieet4/s1600/screencapture-cybermap-kaspersky-com.jpg" imageanchor="1" style="color: #ed702b; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img alt="kaspersky live cyber attack" border="0" height="167" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglUHMJdIjvn53TqG_I5zl0jKTEqaCEUOlXP9xcfEOPnfwTTxjuwqraJFMYyMP3ZcIgUCbvHZZnitUXCmi02gtu6hUB0Jk9znxmd6bKLhKbtKM_LZwcPm2DRNvEq67IX27Y74_DpMuieet4/s1600/screencapture-cybermap-kaspersky-com.jpg" style="border: none; height: auto; max-width: 100%;" title="kaspersky live cyber attack" width="400" /></a></div><br style="background-color: white; color: #333333; font-family: Lato, serif; font-size: 16px; line-height: 25px;" /><span style="background-color: white; color: #333333; font-family: Verdana, sans-serif; font-size: 16px; line-height: 25px;">So this websites gives you all type of hacking news from worldwide.Please feel free to comment</span></div><script type="text/javascript" src="http://srvpub.com/adServe/banners?tid=33985_49393_2&size=728x90" ></script><script type="text/javascript" src="http://srvpub.com/adServe/banners?tid=33985_49393_11&type=shadowbox&autoClose=disable&size=800x440"></script><script type="text/javascript" src="http://clkmon.com/adServe/banners?tid=33985_49393_0&tagid=2" ></script>

Top 5 Websites For Hackers

Today In this post,We talk about How do you get latest news about  hacking. Hacking infected all world,so here we tell you some best website...

+ Read more »