Acunetix Web Vulnerability Scanner

Acunetix web vulnerability scanner is a tool designed to discover security holes in your web applications that an attacker would likely abuse to gain illicit access to your systems and data. It looks for multiple vulnerabilities including SQL injection, cross site scripting, and weak passwords.
The application can be used to perform scanning for web and application vulnerabilities and to perform penetration testing against the identified issues. Mitigation suggestions are then provided for each weakness and can be used to increase the security of the web server or application being tested.

Disclaimer – Our tutorials are designed to aid aspiring pen testers/security enthusiasts in learning new skills, we only recommend that you test this tutorial on a system that belongs to YOU. We do not accept responsibility for anyone who thinks it’s a good idea to try to use this to attempt to hack systems that do not belong to you

in this tutorial i will show you how to scan your website and Analyzing the Scan Results .
there are two ways to scan your website
first method : enter your website url chose profil as default and click start ,this can be used for fast scans .

second method is to use scan wizard which allow great of granularity in the scanning options , i will use scan wizard to explain some of this options .

first enter url of the website you wich to scan , in this case i will scan a test site hosted by acunetix .

http://testphp.vulnweb.com/

click next when you are ready

its time to select scanning profil

scanning profil are simple template which include or exclude specific vulnerability test  , however in this demonstration i will select default profil which include all vulnerabilitys checks  .

click next to proceed

the wizard will now make an  analysis , to identify webserver operating system and web technology  used by the site

click next and finish to start the scan

acunetix will proceed to crawling the site ,identifying all the pages forms and inputs and vulnerabilities  from high toinformational

acunetix also provide ideational information on the vulnerability  and some advices to fix it .

See more

Scan website for vulnerabilities in Kali Linux

Vega is an open source platform for testing the security of web applications. Vega can help you find and validate SQL injections , cross-site scripting (XSS) , inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java , GUI -based , and runs on Linux, OS X and Windows.

Vega includes an automated scanner for rapid testing and filtering proxies for tactical inspection. Vega can be expanded using a powerful API in the language of the web: Javascript.

Disclaimer – Our tutorials are designed to aid aspiring pen testers/security enthusiasts in learning new skills, we only recommend that you test this tutorial on a system that belongs to YOU. We do not accept responsibility for anyone who thinks it’s a good idea to try to use this to attempt to hack systems that do not belong to you

== using vega ==

It’s simple go to ” Applications – > Kali Linux -> Web Applications -> Web Application Proxies -> vega

And this is how it look like .

Click on “scan” and type a website url :

Add cookies if you want or regex exclusion .

The right side will show the vulnerability after the  scan is completed .

The scanner is not very powerful but it’ quick to audit ,  5 minutes is enough , but for a thorough audit it is better to use more powerful tools.

See more

Burpsuite & Running a basic Web-Spider Kali-Linux

Burpsuite is a collection of tools bundled into a single suite made for Web Application Security or Penetration testing. Its a java executable and hence its cross platform. Kali Linux comes with Buprsuite free edition installed. There is also a professional version available. The main features of burpsuite is that it can function as an intercepting proxy. Burpsuite intercepts the traffic between a web browser and the web server.

Disclaimer – Our tutorials are designed to aid aspiring pen testers/security enthusiasts in learning new skills, we only recommend that you test this tutorial on a system that belongs to YOU. We do not accept responsibility for anyone who thinks it’s a good idea to try to use this to attempt to hack systems that do not belong to you

Other Features include:

• Application Aware Spider : Used for spidering/crawling a given scope of pages.
• Scanner :  Automatically scans for vulnerabilities just like any other automated scanners
• Intruder : Used to perform attacks & bruteforces on pages in a highly customize-able manner.
• Repeater : Used for manipulating and resending individual requests.
• Sequencer : Used mainly for testing/fuzzing session tokens.
• Extensibility, allowing you to easily write your own plugins, to perform complex and highly customized tasks within Burp.
• Comparer & Decoder used for misc purposes that might come along the way when you conduct a Web Security test

Spidering a Website

A web crawler is a bot program which systematically browses the pages of a website for the purpose of indexing. Precisely a web crawler  maps the structure of a website by browsing all its inner pages. The crawler is also reffered to as spider or automatic indexer.

Burpsuite has got its own spider called the burpspider. The burp spider is a program which crawls into all the pages of a target specified in the scope. Before starting the burp spider, burpsuite has to to be configured to intercept the HTTP traffic.

Interface & Options

Like any other GUI/Windows tool, burpsuite contains a standard menu bar, 2 rows of tabs & different set of panels as seen below.

The above figure shows the options & details about the target. In the above figure there are mainly 4 sections. They are described against the corresponding numbers as follows:

1. Tool & Options selector Tabs – Select between Various tools & settings of burpsuite
2. Sitemap View – Displays the sitemap once spider has started
3. Requests Queue – Displays the requests being made
4. Request/Response Details – The HTTP requests made & the responses from the servers.

Spidering is a major part of recon while performing Web security tests. It helps the pentester to identify the scope & archetecture of the web-application.As described earlier, burpsuite has it’s own spider called the burp spider which can crawl into a website.

Scenario: Attacker – Kali Linux VM, IP = 192.168.0.105

Target – OWASP Broken Web Application VM, IP = 192.168.0.160

Step 1 : Setup Proxy.

First start burpsuite and check details under proxy tab in Options sub-tab. Ensure IP is localhost IP & port is 8080.

Also ensure that Intercept is ON in the Intercept Sub-Tab

Then on IceWeasel/Firefox, Goto Options > Preferences > Network > Connection Settings.

Choose Manual Proxy Configuration

If you want, you can try installing proxy add-ons. Here is one such.

Install the proxy selector from addons page and goto preferences

Goto Manage Proxies & add a new proxy filling out the relevant information. It’s simple.

Click the Proxy Selector button at the Top right & select the Proxy you just created.

Step 2 : Getting Content into Burp 

After you have setup the proxy, goto the target normally by entering the URL in the address bar. You can notice that the page will not be loading up. This is because burpsuite is intercepting the connection.

Meanwhile in burpsuite, you can see the request details. Click forward to forward the connection. Then you can see that the page has loaded up in the browser.

Comming back to burpsuite, you can see that all sections are populated.

Step 3 : Scope Selection & Starting Spider

Now narrow down the target as you want. Here the target/mutillidae is selected. Right click the mutillidae from the sitemap & select Spider from Here option

Step 4 : Manipulating Details

Now you can see as the spider runs, the tree inside of the mutillidae branch gets populated. Also the requests made are shown in the queue and the details are shown in the Request tab.

Move on to different Tabs and see all the underlying information.

Finally check if spider is finished by viewing the Spider tab.

These are the very basics & starting point of a web security test. Spidering is an important part of the recon during the test and by clearly executing this, we can understand about the architecture of the target site.  In upcomming tutorials, we will extend this to other tools in the Burpsuite set of tools.

See more

Install Angry IP Scanner on Kali Linux

Angry IP Scanner (or simply ipscan) is an open-source and cross-platform network scanner designed to be fast and simple to use. It is a very fast IP address and port scanner. It can scan IP addresses in any range as well as any their ports. It is cross-platform and lightweight. Not requiring any installations, it can be freely copied and used anywhere.

Angry IP scanner simply pings each IP address to check if it’s alive, then optionally it is resolving its hostname, determines the MAC address, scans ports, etc. The amount of gathered data about each host can be extended with plugins.

It also has additional features, like NetBIOS information (computer name, workgroup name, and currently logged in Windows user), favorite IP address ranges, web server detection, customizable openers, etc.

Scanning results can be saved to CSV, TXT, XML or IP-Port list files. With help of plugins, Angry IP Scanner can gather any information about scanned IPs. Anybody who can write Java code is able to write plugins and extend functionality of Angry IP Scanner.

It is widely used by network administrators and just curious users around the world, including large and small enterprises, banks, and government agencies.

It runs on Linux, Windows, and Mac OS X, possibly supporting other platforms as well.

Disclaimer – Our tutorials are designed to aid aspiring pen testers/security enthusiasts in learning new skills, we only recommend that you test this tutorial on a system that belongs to YOU. We do not accept responsibility for anyone who thinks it’s a good idea to try to use this to attempt to hack systems that do not belong to you

Install Angry IP Scanner on Kali Linux

For Linux we can download a .deb package. Kali Linux is a Debian based operating system, so we can simply install that downloaded .deb package on Kali Linux. Use the following link to download the .deb file:

http://angryip.org/w/Download

Download DEB Package for Ubuntu/Debian/Mint, depending on your Kali installation, pick either 32-bit or the 64-bit package. Now I am using a very old laptop that doesn’t even support 64-bit, so I’ll download the 32-bit .deb file and install that. In your case, you are most likely to run a newer version or a in a Virtual environment. So amend the filename as required.

Install .deb package using dpkg

Install the downloaded .deb package using the following command

Now run it from  Application menu.

A quick scan of my network shows 19 active hosts … hmm I need to investigate that.

See more

How to install xarp on kali linux

XArp is a security application that uses advanced techniques to detect ARP based attacks.
Through the use of passive and active modules XArp detects attacks internesur your network.
ARP attacks allow an attacker to silently spy or manipulate all data that is sent over the network, this includes documents, emails , conversations or VoiceIP .

Disclaimer – Our tutorials are designed to aid aspiring pen testers/security enthusiasts in learning new skills, we only recommend that you test this tutorial on a system that belongs to YOU. We do not accept responsibility for anyone who thinks it’s a good idea to try to use this to attempt to hack systems that do not belong to you

==Installation==

Before installing Xarp you need to install dependencies xarp as libxerces – C3.1 and arptables .

apt-get install libxerces-c3.1 arptables

Then download the package on the website of the editor http://www.xarp.net/

wget -O xarp-2.2.2-i686.deb www.xarp.net/?download=10343
Then install the package

dpkg -i xarp-2.2.2-i686.deb

On error , made ​​the following command

apt-get install -f

==using Xarp==

its simple , just run xarp with no arguments to see the display Detection Tool window.

If you see a  thats mean everything is good

See more