Web security scanner

[solidstar]

Hi! What system do you guys use for web security? I need one that can crawl JSON or maybe HTML5 as well. Any suggestions? Thanks!

 

[sn8ke]

Hi! What system do you guys use for web security? I need one that can crawl JSON or maybe HTML5 as well. Any suggestions? Thanks!

I use Burp Suite, probably the most widely used in the industry https://portswigger.net/burp/
Proprietary and not cheap. If you want a GPL one Nikto is pretty good but it's known to hammer clients' servers pretty hard which they don't like.

 

[Dude111]

That would be like having a high level attack.... No I dont think they would like it!!

 

[sn8ke]

That would be like having a high level attack.... No I dont think they would like it!!

Indeed, but depends on the client. Some want stress test type stuff as well, or to simulate real world scenarios. Most just want you to patch and update stuff though.

 

[orderlydentist]

Hi! What system do you guys use for web security? I need one that can crawl JSON or maybe HTML5 as well. Any suggestions? Thanks!

I only got a few idea from a friend. According to him, there is a system that calls to monitor the file system and there is a tool like a web crawler (not so sure of the term). If I heard it correctly, this can keep an eye on certain areas of your computer like changes on a file system. Are you referring to that type of security?

 

[solidstar]

Hello everyone. Sorry for the late reply.
My friend recommended using this Beyond Trust scanner so I got it and he taught me how to use it. Thanks to him, every thing is working out fine now.
Thanks for replying too.

 

[John Connor]

https://sourceforge.net/projects/zaproxy/

https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

Do not run it on someone elses website.