full-disclosure - Release of webshag 1.00!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 20 Mar 2008 10:17:10 +0100
From: webshag@...t.ch
To: full-disclosure@...ts.grok.org.uk
Subject: Release of webshag 1.00!

Webshag is a free, multi-threaded, multi-platform web server audit tool.

Written in Python, it gathers commonly useful functionalities for web
server auditing like website crawling, URL scanning or file fuzzing. It
also provides innovative functionalities like the capability of
retrieving  the list of domain names hosted on a target machine and file
fuzzing using *dynamically* generated filenames (in addition to common
list-based fuzzing).

Webshag URL scanner and file fuzzer are aimed at reducing the number of
false positives and thus producing cleaner result sets. For this
purpose, webshag implements a web page fingerprinting mechanism
resistant to content changes. This fingerprinting mechanism is then used
in a false positive removal algorithm specially aimed at dealing with
"soft 404" server responses.

Webshag provides a full featured and intuitive graphical user interface
as well as a text-based command line interface.

It is freely downloadable (GPL license) for Linux and Windows platforms
from http://www.scrt.ch/pages_en/outils.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/