So far, we learned how to manually discover a number of very dangerous vulnerabilities, we how to
how they work and how to exploit them.
And today's video, I'd like to show you a tool that will allow you to automatically discover vulnerabilities
in Web applications.
It will allow you to discover the vulnerabilities that we learned, plus much more.
The reason why I didn't teach you this at the start, because I wanted you to learn how to do it manually.
And I also wanted you to know how these vulnerabilities occur.
So to understand the reason behind them also, these are just tools.
So this program is just a tool.
It can make mistakes and it can show false positives.
It can also miss vulnerabilities in some cases.
Therefore, I wanted you to know how to do this stuff manually.
So if the program doesn't work or if the program misses something, then you'll be able to find it.
The best way to use these programs is as a backup or as just a tool to help you with your penetration
testing.
So using the tool is very simple.
I'm going to go on my applications and then I'm going to type in up.
And it's asking me if I want to save the current session when I search for something, so I'm going
to say no.
And this is the main view of the two, so on the left here, you'll see the websites that you're targeting
on the right you can attack and said the website URL.
And in here, you'll see the results for your attacking or for your scan.
If we go here on the cog on the left, it will allow you to modify the options for the program.
So you can modify certain aspects of it, the way the father works, the way the spider works, the
way this works.
I'm going to give everything the same.
Another thing that you can modify is the policies used in this country or something similar to the scandal
that we were using with and maybe the intense count and all that.
So I'm going to press on the plus and get a price on the active scam.
And if you press on this on the left here.
And I'm going to press on the default policy now.
You can create your own policies by using the add button.
I'm going to press on the default one and I'm going to go on modified to see you to show you the aspects
that you can modify.
So right here, he can modify the name, the threshold and the strength for the global policy.
Clicking on each of these categories will allow you to modify the.
Specific scans that will be performed, for example, and the injection tab here, we can see all the
injection scans that the program is going to try.
For example, you can see Eskil injections here.
You can see cross site scripting here and present on the threshold right here.
We can set this to default low, medium or high, certainly to the default will just default to the
value selected here, which is medium right now.
Or you can have, for example, of Eskil injection is what you're looking for.
If you're what you're looking for is access for the database, then you can set this to high so that
it will try everything and it will try to find it and even difficult places.
So I'm going to close all of this, I'm leaving everything the same, and I'm going to start my attack
against the Mattilda script.
So we have it in 10, 20, 14 to 04 running in the Middle East floatable machine.
And if we go on all day right here, that's the URL, so naturally I'm just going to copy this.
And paste it here.
And then I'm going to attack.
Now, the tool is first going to try to find all the URLs and then it's going to try and attack these
URLs based on this current policy that we used.
I'm going to post the video and resume it once this is over.