标题:Web安全扫描工具 WebCruiser 出处:沧海一粟 时间:Sat, 10 Sep 2011 15:14:12 +0000 作者:jed 地址:http://www.dzhope.com/post/843/ 内容: WebCruiser - Web Vulnerability Scanner V1.2.1.0206 运行平台:Windows with .Net FrameWork 2.0或以上。 界面语言:英文版 功能简介: * 网站爬虫(目录及文件); * 漏洞扫描(SQL注入,跨站脚本); * 漏洞验证(SQL注入,跨站脚本); * SQL Server明文/字段回显/盲注; * MySQL字段回显/盲注; * Oracle字段回显/盲注; * DB2字段回显/盲注; * Access字段回显/盲注; * 管理入口查找; * GET/Post/Cookie 注入; * 搜索型注入延时; * 自动从自带浏览器获取Cookie进行认证; * 自动判断数据库类型; * 自动获取关键词; * 多线程; * 高级:代理、敏感词替换/过滤; * 报告; --------------------------------------------------- Function: * Crawler(Site Directories And Files); * Vulnerability Scanner(SQL Injection, Cross Site Scripting); * POC(Proof of Concept): SQL Injection and Cross Site Scripting; * GET/Post/Cookie Injection; * SQL Server: PlainText/FieldEcho(Union)/Blind Injection; * MySQL/Oracle/DB2/Access: FieldEcho(Union)/Blind Injection; * Administration Entrance Search; * Password Hash of SQL Server/MySQL/Oracle Administrator; * Time Delay For Search Injection; * Auto Get Cookie From Web Browser For Authentication; * Multi-Thread; * Adcanced: proxy,Escape Filter; * Report Output. 点击这里下载文件 Generated by Bo-blog 2.1.1 Release