Skipfish

It's a reconnaissance web application security tool. Some of it's features are dictionary-based probes and recursive crawls. A website's sitemap is eventually annotated for security assessments.

Skipfish - Google Code

https://code.google.com/p/skipfish/

·  skipfish. Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive ...

‎Downloads - ‎SkipfishDoc - ‎Wiki - ‎Authentication

 

·  skipfish - Google Code

https://code.google.com/p/skipfish/wiki/SkipfishDoc

Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive crawl and ...

 

·  [PDF]Web Application Vulnerability Scanner: Skipfish - Akamai

www.akamai.com/.../Akamai-Security-Advisory-Skipfish-Application-Sc...

·  Skipfish is an automated web application vulnerability scanner available for ... Skipfish is another scanning tool much in the same vein as Nikto, Netsparker or ...

 

·  Automated Audit using SKIPFISH - OWASP

https://www.owasp.org/index.php/Automated_Audit_using_SKIPFISH

·  Jul 16, 2013 - Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a ...

 

·  Google Online Security Blog: Meet skipfish, our automated ...

googleonlinesecurity.blogspot.com/.../meet-skipfish-our-automated-web....

·  Mar 19, 2010 - Today, we are happy to announce the availability of skipfish - our free, ... Ease of use: the tool features heuristics to support a variety of quirky ...

 

·  Google releases Skipfish web-security scanner | ZDNet

www.zdnet.com/.../google-releases-skipfish-web-security-scanner-30400...

·  Mar 22, 2010 - The new open-source tool is designed to put web apps through their paces, managing over 2000 tests a second.

 

·  Google releases skipfish, an application security tool | ZDNet

www.zdnet.com/.../google-releases-skipfish-an-application-security-tool/

·  Mar 20, 2010 - As someone who manages web applications, skipfish is a really easy and quick way to run your website through a fairly comprehensive set of ...

 

·  Skipfish Scanner Used in Financial Sector Attacks | The ...

www.tripwire.com › Home › Latest Security News

·  Jan 8, 2014 - “Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a ...

 

·  Introduction to Skipfish | ClubHACK Magazine

www.chmag.in/article/feb2012/introduction-skipfish

·  Skipfish is an active web application security reconnaissance tool written and maintained by Michal Zalewski (@lcamtuf). Skipfish is one of the fastest ...

 

·  lcamtuf's blog: Understanding and using skipfish

lcamtuf.blogspot.com/2010/11/understanding-and-using-skipfish.html

Nov 21, 2010 - Skipfish, my open source web application security scanner, is now ... to share some additional hints on how to get the most out of this tool, 

 

Wfuzz

This tool is designed in such a way that it helps in brute-forcing web applications. Wfuzz can be used for finding resources but it does not play any role in finding the links like directories, servlets, scripts and others. It has multiple injection points and allows multi-threading.

 

Wapiti

Wapiti is a web application vulnerability scanner that allows you to audit the security of the web applications that you are using. The scanning process is “black-box” type and detects the vulnerabilities like file disclosure, data injection, XSS injection and many others.

 

W3af

It is a web application attack and audit framework that helps in auditing any threat that the web application experiences. This framework is built on Python and is easy-to-use and can be extended. It is licensed under GPLv2.0.