18 ms·

NAVEX: Precise and scalable exploit generation for dynamic web applications

• dvh 8y ago
  Similar tools: skipfish, wapiti
  • _pdp_ 8y ago
    Shameless plug scanner.secapps.com - tests are executed in your browser.
    • tingletech 8y ago
      I get a blank page with a couple of console errors when I visit that URL (Safari on OS X) Edit: Not sure why I'm getting downvoted -- the parent tool sounded interesting, but I get a blank page and these errors on the console https://gist.github.com/tingletech/153118cb3078fe2667a3874f0fbbd272 https://gist.github.com/tingletech/153118cb3078fe2667a3874f0...
      • blacksmith_tb 8y ago
        Looks like it is intended to work in FF and Chrome only [1] judging by its extension. 1: https://secapps.com/extension https://secapps.com/extension
        • _pdp_ 8y ago
          Yes. There is currently pretty poor support for Safari and specifically IE but we are working on it.
  • bellinom 8y ago
    Skipfish and wapiti are quite a bit different than this. They are simply blackbox scanners that attempt to crawl a webpage and look for common issues, mostly by trial and error. This is examining the source code of an application, finding all the sinks, building a graph, and working backwards through the graph to find sources that can pass input to the vulnerable sinks.
  • nigifabio 8y ago
    Far for being the same, did you read the article? It’s not a simple vuln scanner
• doublerebel 8y ago
  for dynamic PHP web applications. Other languages are not yet supported.
  • deleted 8y ago
    [deleted]