Thursday, August 20, 2020

Spaghetti: A Website Applications Security Scanner


About Spaghetti
   Author: m4ll0k   Spaghetti is an Open Source web application scanner, it is designed to find various default and insecure files, configurations, and misconfigurations. Spaghetti is built on Python 2.7 and can run on any platform which has a Python environment.

Spaghetti Installation:

Spaghetti's Features:
   Fingerprints:
  • Server:
  • Web Frameworks (CakePHP,CherryPy,...)
  • Web Application Firewall (Waf)
  • Content Management System (CMS)
  • Operating System (Linux,Unix,..)
  • Language (PHP,Ruby,...)
  • Cookie Security
   Discovery:
  • Bruteforce:Admin Interface
    Common Backdoors
    Common Backup Directory
    Common Backup File
    Common Directory
    Common FileLog File
  • Disclosure: Emails, Private IP, Credit Cards
   Attacks:
  • HTML Injection
  • SQL Injection
  • LDAP Injection
  • XPath Injection
  • Cross Site Scripting (XSS)
  • Remote File Inclusion (RFI)
  • PHP Code Injection
   Other:
  • HTTP Allow Methods
  • HTML Object
  • Multiple Index
  • Robots Paths
  • Web Dav
  • Cross Site Tracing (XST)
  • PHPINFO
  • .Listing
   Vulns:
  • ShellShock
  • Anonymous Cipher (CVE-2007-1858)
  • Crime (SPDY) (CVE-2012-4929)
  • Struts-Shock
Spaghetti Example:
python spaghetti --url example.com --scan 0 --random-agent --verbose


Related posts
  1. Tools For Hacker
  2. Hacker Tools 2019
  3. Kik Hack Tools
  4. How To Hack
  5. Pentest Tools Open Source
  6. Hacking Tools
  7. Hack Website Online Tool
  8. Hacking Tools Mac
  9. Hacker Tools Software
  10. Pentest Tools Review
  11. Hack And Tools
  12. Kik Hack Tools
  13. Hacking Tools Free Download
  14. Usb Pentest Tools
  15. Hacker Tools For Windows
  16. Hack Tools Online
  17. Pentest Tools Bluekeep
  18. Hack Tools Mac
  19. Hacking Tools Github
  20. Pentest Tools Find Subdomains
  21. Pentest Tools Alternative
  22. Hacker Tools Github
  23. Pentest Tools Windows
  24. Free Pentest Tools For Windows
  25. Pentest Tools Tcp Port Scanner
  26. Pentest Tools Alternative
  27. Install Pentest Tools Ubuntu
  28. Hacking Tools For Windows Free Download
  29. Game Hacking
  30. Hacker Tools For Windows
  31. Blackhat Hacker Tools
  32. Hack Tools 2019
  33. Hacking Tools For Windows
  34. Hack Tools For Windows
  35. Beginner Hacker Tools
  36. Kik Hack Tools
  37. Hacking Tools And Software
  38. Hacks And Tools
  39. Hacker Tools Free
  40. Hacker Tools Free
  41. Pentest Tools Free
  42. Pentest Tools Android
  43. Hack Tools For Pc
  44. Hack Tools Download
  45. Pentest Tools Bluekeep
  46. Pentest Tools List
  47. Hacker Tools 2020
  48. Hacker Tools Free
  49. Pentest Tools List
  50. Pentest Reporting Tools
  51. Hacker
  52. Android Hack Tools Github
  53. Pentest Tools Url Fuzzer
  54. Pentest Tools For Ubuntu
  55. Free Pentest Tools For Windows
  56. Hack Tools Pc
  57. Hacking Apps
  58. Pentest Tools For Mac
  59. Hack Website Online Tool
  60. Physical Pentest Tools
  61. Hacking Tools And Software
  62. Pentest Tools Online
  63. Hacking Tools Windows 10
  64. Hacker Tools Software
  65. Hacker Tools Software
  66. How To Install Pentest Tools In Ubuntu
  67. Hacking Tools Windows 10
  68. Hacking Tools For Windows 7
  69. Easy Hack Tools
  70. Pentest Reporting Tools
  71. Hacker Tools Online
  72. Pentest Tools Online
  73. Hack Tool Apk
  74. Hacking Tools Windows 10
  75. Hacker Tools Apk Download
  76. Hack Tools For Games
  77. Hack Tools Download
  78. Hacking Tools For Pc
  79. Hacking Tools Pc
  80. Hacker Tools For Mac
  81. Pentest Tools Url Fuzzer
  82. Pentest Tools Port Scanner
  83. Termux Hacking Tools 2019
  84. Hacker Tool Kit
  85. Hacking Tools For Pc
  86. Pentest Tools For Ubuntu
  87. Hacker Tools For Pc
  88. Hack Rom Tools
  89. Pentest Tools Find Subdomains
  90. Pentest Tools Linux
  91. Bluetooth Hacking Tools Kali
  92. Hacker Tools Mac
  93. Hacking Tools 2019
  94. Hacker Tools Hardware
  95. Pentest Tools Website
  96. Hack Rom Tools
  97. Hacking Tools For Windows
  98. Hack And Tools
  99. Hack Rom Tools
  100. Hack Tools For Windows
  101. Hack Tools For Pc
  102. Android Hack Tools Github
  103. Pentest Tools Alternative
  104. Hak5 Tools
  105. Hack Tools
  106. Top Pentest Tools
  107. Beginner Hacker Tools
  108. Underground Hacker Sites
  109. Hacker Tools 2019
  110. Hak5 Tools
  111. Hacking Tools For Pc
  112. New Hacker Tools
  113. Hack Tools For Pc
  114. Pentest Tools Review
  115. New Hacker Tools
  116. Hacking Tools Software
  117. Pentest Tools Apk
  118. Hacking Tools Software
  119. Hacker Tools Free
  120. Best Hacking Tools 2020
  121. Pentest Tools Github
  122. Github Hacking Tools
  123. Hacking Tools Name
  124. Pentest Tools For Android
  125. Pentest Tools Review
  126. Hacker Tools Windows
  127. Hacker Tools Linux
  128. Hack Tools
  129. Pentest Tools For Android
  130. Pentest Tools Subdomain
  131. Hacking Tools
  132. Hacking Tools Github
  133. Pentest Tools Port Scanner
  134. Pentest Tools Android
  135. Beginner Hacker Tools
  136. Blackhat Hacker Tools
  137. Underground Hacker Sites
  138. Hacker Tools Apk
  139. Hackers Toolbox
  140. World No 1 Hacker Software
  141. Best Pentesting Tools 2018
  142. Pentest Tools Tcp Port Scanner
  143. Tools Used For Hacking
  144. Usb Pentest Tools
  145. Hacking Tools And Software
  146. Hacking Tools Windows 10
  147. Hak5 Tools
  148. Pentest Tools Nmap
  149. Physical Pentest Tools
  150. Best Hacking Tools 2019
  151. Hack Tools For Mac
  152. Hack Tools For Ubuntu
  153. World No 1 Hacker Software
  154. Tools 4 Hack
  155. Hack Apps
  156. Pentest Tools Online
  157. Hacker Tools
  158. Hacker Tools For Pc
  159. Hacking Tools For Mac
  160. Hack Tools For Mac
  161. Hacking Tools Hardware
  162. New Hacker Tools
  163. Pentest Tools Free
  164. Hacker Tools Free
  165. Hack And Tools
  166. Hacking Tools For Windows
  167. Pentest Tools Tcp Port Scanner
  168. Hak5 Tools

No comments: