So far we learned how to manually discover a number of very dangerous vulnerabilities.
We've seen how to how they work and how to exploit them.
In today's video I'd like to show you a tool that will allow you to automatically discover vulnerabilities
in web applications.
It will allow you to discover the vulnerabilities that we learned.
Plus much more.
The reason why I didn't teach you this at the start because I wanted you to learn how to do it manually.
I also wanted you to know how these vulnerabilities occur.
So to understand the reason behind them also these are just tools.
So this program is just a tool.
It can make mistakes and it can show false positives.
It can also miss vulnerabilities.
In some cases therefore I wanted you to know how to do this stuff manually.
So if the program doesn't work or if the program misses something then you'll be able to find it.
The best way to use these programs is as a backup or as just a tool to help you with your penetration
testing so using the tool is very simple.
I'm going to go in my application and then I'm going to Taipans up
and ask me if I want to save the current session when I search for something so I'm going to say no.
And this is the main view of the tool.
So on the left here you'll see the websites that you're targeting on the right you can attack and said
the Web site you're Al and in here you'll see the results for your attacking or for your scan.
If we go here on the car on the left it'll allow you to modify the options for the program so you can
modify certain aspects of it the way the father works the way the spider works the way the scanner is
I'm going to leave everything the same and other things that you can modify as the policies used in
this can.
So something similar to this cause that we were using with AdMob the intense scan and all that.
So I'm going to press on the plus and get a press on the active scan.
And if you press on this on the left here and I'm going to press on the default policy now you can create
your own policies by using the bottom.
I'm going to press on the default one and I'm going to go on modify it to see you to show you the aspects
that you can modify.
So right here you can modify the name the threshold and the strength for the global policy.
Clicking on each of these categories will allow you to modify the specific scans that will be performed
for example and the injection tab here we can see all the injection scans that the program is going
to try.
For example we can see Eskdale injections here can see cross-site scripting here and present on the
threshold right here we can set this to default low medium or high certainly to the default we'll just
default to the value selected here which is medium right now.
Or you can have for example of Asgill injection is what you're looking for if you're what you're looking
for is access for the database then you can set this to high so that it'll try everything and try to
find it in even difficult places.
So I'm going to close all of this I'm leaving everything the same.
I know when I started my attack against the Matildas script.
So we have it.
And then in 2014 to 0 4 running in the US floatable machine and if we go on till date right here that's
the or else.
So it's really I'm just going to copy this
and paste it here.
And then I'm going to talk now to all is first going to try to find all the or else.
And then it's going to try and attack these you are Elle's based on this current policy that we used.
I'm going to post the video and resume it once this comes over.