Questions about this topic? Sign up to ask in the talk tab.
Difference between revisions of "Vanguard"
From NetSec
(→Features) |
(→Description) |
||
Line 1: | Line 1: | ||
{{warning|The end-user is liable for his-or her own actions with the use of this software. Running this against a system you do not own without written authorization is a criminal act.}} | {{warning|The end-user is liable for his-or her own actions with the use of this software. Running this against a system you do not own without written authorization is a criminal act.}} | ||
=Description= | =Description= | ||
− | {{info|Vanguard is a comprehensive [[Web Exploitation|web pen testing tool]] that identifies vulnerabilities in [[Web | + | {{info|Vanguard is a comprehensive [[Web Exploitation|web pen testing tool]] that identifies vulnerabilities in [[Web applications|web applications]].}} |
==Features== | ==Features== | ||
'''Main application features:''' | '''Main application features:''' |
Revision as of 03:12, 9 January 2012
The end-user is liable for his-or her own actions with the use of this software. Running this against a system you do not own without written authorization is a criminal act. |
Contents
Description
Vanguard is a comprehensive web pen testing tool that identifies vulnerabilities in web applications. |
Features
Main application features:
- Fully Configurable
- WebCrawlers crawl all open HTTP and HTTPS ports output from nmap
- LibWhisker2 For HTTP IDS Evasion (Same options as nikto)
- Tests via GET,POST, and COOKIE
- SQL injection
- LDAP Injection
- XSS
- File inclusion
- Command Injection
Usage
perl scan.pl -h [hostname] -e [evasion option]