full-disclosure - Web application Security Scanner

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon Jun 13 19:21:53 2005
From: toddtowles at brookshires.com (Todd Towles)
Subject: Web application Security Scanner

The list is right, pen-testing isn't as easy as running one tool. If there was a "best" tool that found everything, then why would people use any other tool? 

Going to attack Russian Google, well glad you said it on here...that will make it hard for them to trace you down..lol

> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk 
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf 
> Of tgoogle
> Sent: Monday, June 13, 2005 12:10 PM
> To: full-disclosure@...ts.grok.org.uk
> Cc: deepquest@....com
> Subject: Re: [Full-disclosure] Web application Security Scanner
> 
> Thanks,
> 
> I shall test all these programs, tomorrow I send my results. 
> For example, i try to find vulnerabilities in www.yandex.ru 
> and www.google.ru sites :).
> 
> You really consider that all these programs are capable found 
> vulnerability in UNKNOWN scripts?
> 
> I need BEST program, which can found Maximum bugs in any 
> custom Web application.
> 
> 
> >http://www.0x90.org/releases/absinthe/
> >http://www.nessus.org/download/ with some plugins 
> >http://www.cirt.net/code/nikto.shtml
> >
> >The "best" depends of your target, the OS you use, if you 
> looking for 
> >opensource products or commercial ones.
> >Just google there many of them.
> >
> >
> >Deepquest
> >"Justification of windows usage is a combinaison of 
> Stockholm Syndrome 
> >and cognitive dissonance."
> >--------------------------------------------------------------
> >Propaganda              http://deepquest.code511.com/blog
> >FIB                     http://www.futureisbeta.com
> >PGP DH/DSS              http://www.futureisbeta.com/pgp
> >--------------------------------------------------------------
> >
> >> Did you know the best Web app security scanner?
> >>
> >> I need scanner, which would find SQL injections, XSS, php 
> include and 
> >> other bug in unknown Web application.
> >>
> >> Thanks
> >> _______________________________________________
> >> Full-Disclosure - We believe in it.
> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >> Hosted and sponsored by Secunia - http://secunia.com/
> >>
> >>
> >
> 
> 
> --
> ??????.?????: ????? ????????? ????? ?? ?????????! 
> http://mail.yandex.ru/monitoring/ 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>