So far we learned how to manually discover a number of very dangerous vulnerabilities.
We've seen how to how they work and how to exploit them.
And today's video I'd like to show you a tool that will allow you to automatically discover vulnerabilities
in web applications.
It will allow you to discover the vulnerabilities that we learned plus much more.
The reason why I didn't teach you this at the start because I wanted you to learn how to do it manually.
I also wanted you to know how these vulnerabilities occur.
So to understand the reason behind them.
Also these are just tools.
So this program is just a tool.
It can make mistakes and it can show false positives.
It can also miss vulnerabilities.
In some cases therefore I wanted you to know how to do this stuff manually.
So if the program doesn't work or if the program misses something then you'll be able to find it the
best way to use these programs is as a backup or as just a tool to help you with your penetration testing
so using the tool is very simple.
I'm gonna go on my applications and then I'm gonna opens up
and it's asking me if I want to save the current session when I use search for something so I'm going
to say no
and this is the main view of the tool.
So on the left here you'll see the websites that you're targeting on the right you can attack and said
the website your URL and in here you'll see the results for your attacking or for your scan.
If we go here on the card on the left it will allow you to modify the options for the program so you
can modify certain aspects of it the way the fossil works the way the spider works the way the scan
works.
I'm going to give everything the same other thing that you can modify is the policies used in this count
so something similar to this count that we were using with and map the intense count and all that.
So I'm going to press on plus I'm going to press on the active scan and if you press on this on the
left here and I'm going to press on the default plus the policy that you can create your own policies
by using the Add button.
I'm going to press on the default one and I'm going to go on modified to see you to show you the aspects
that you can modify so right here you can modify the name the threshold and the strength for the Global
Policy
click in on each of these categories will allow you to modify the specific scans that will be performed
for example and the injection tab here we can see all the injection scans that the program is going
to try.
For example you can see a scale injections here can see cross site scripting here and pressing on the
threshold right here we can set this to default low medium or high setting it to the default will just
default to the value selected here which is medium right now.
Already you can have for example of Eskil injection is what you're looking for if you're what you're
looking for is access for the database then you can set this to high so that it will try everything
and it'll try to find it and even difficult places
so I'm going to close all of this I'm leaving everything the same and I'm going to start my attack against
the Matilda's script.
So we have it in 10 20 14 to 0 4 running in the myth exploitable machine and if we go on all day right
here does the url.
So literally I'm just going to copy this
and paste it here and then I'm going to attack.
Now the tool is first gonna try to find all the URLs and then it's going to try and attack these your
Ls based on this policy that we used.
I'm gonna pop the video and resume it once this count is over.