Features

Reconnaissance

• HTTP Header checks
• HTTP enabled methods check (Cross Site Tracing)
• Cookie checks (decodes base64 automatically)

Description and Priority

Reconnaissance or preliminary surveying or research is done first. This gives the user a basic overview of their web app as well as some basic recon checks mentioned above. In total the reconnaissnce module will give the user an overview about the response header and also basic recon results including CSS checks and cookie checks.

Information Disclosure

• Robots.txt Analysis
• .htaccess public access check
• .svn/entries public access check
• Microsoft IIS, internal IP disclosure check

Description and Priority

Information disclosure enables an attacker to gain valuable information about a system. The information collected can be used to attack the websites.

Web vulnerabilities check

• Error based SQl injection
• Cross Site Scripting
• Other URL based attacks

Description and Priority

This module will check for all possible web based attacks and if any web vulnerabilities found , a link about how to exploit the vulnerability is given back to user.