Thursday, August 27, 2020

Web-fu - The Ultimate Web Hacking Chrome Extension

Web-fu Is a web hacking tool focused on discovering and exploiting web vulnerabilitites.

 BROWSER INTEGRATION 

This tool has many advantages, as a browser-embedded webhacking tool, is very useful for scanning browser-authenticated applications, if browser can authenticate and access to the web application, the tool also can. Note that some other tools do not support neither certificate authentication nor web vpn accesses.
The integration with chrome, provides a more comfortable and agile way of web-hacking, and you have all the application data loaded on the hacking tool, you don't need to copy the url, cookies, etc. to the tool, just right click and hack.
The browser rendering engine is also used in this tool, to draw the html of the responses.


 FALSES POSITIVES 

When I coded this tool, I was obsessed with false positives, which is the main problem in all detection tools.  I have implemented a gauss algorithm, to reduce the faslse positives automatically which works very very well, and save a lot of time to the pentester.


 VIDEO 

 Here is a video, with some of the web-fu functionalitites:

 VISUAL FEATURES 

This tool has a visual crawler. Normal crawlers doesn't parse the ajvascript, this tool does. The visual crawler loads each link of the web site, rendering the html and executing all the javascript as a normal load, then the links are processed from he DOM and clicked.
A visual form cracker, is also available, althow is experimental and only works on some kind of forms.


 SCANNING FEATURES

The web-fu's portscanner, has a database of a common web ports, like 80,81,8080 and so on.
The cracker module, can bruteforce web directories to find new attack vectors, and can fuzz get and post parameters for discovering vulns, and also crack passwords. There are 9 preloaded wordlists, and you can also load a custom wordlist. Prefilters, falsepositive reductor and render will be helpful. The scanners support SSL, if the website can be loaded in the chrome, can be scanned by web-fu.


ENCODERS & DECODERS

The supported encoders and decoders are: base64, urlescape and urlencode


OTHER FEATURES

A web notepad is available, saving the information on the browser localStorage, there is one notepad per site. A cookie editor is also very useful for pentesting. The inteceptor, is like a web proxy but from the inside of the browser, you can intercept a request There is also a session locker and a exploit web search.


CHROME STORE 
Here is the link to the chrome store, the prize is about one euro, very cheap if you compare with other scanners: Web-Fu on Chrome Store


 With webfu, you will do the best web site pentest and vulnerability assessment.


More info


  1. Hacker Tools Free
  2. Hacker Hardware Tools
  3. Hacker Tools List
  4. Hack Tools For Ubuntu
  5. Hacker Tools Mac
  6. Hacker Techniques Tools And Incident Handling
  7. Hacking Tools For Windows 7
  8. Hacking App
  9. Game Hacking
  10. Pentest Automation Tools
  11. Hackrf Tools
  12. Pentest Tools For Ubuntu
  13. Best Hacking Tools 2020
  14. Pentest Tools Alternative
  15. Hacker Tools Apk
  16. Hacker Tools Windows
  17. Pentest Tools Nmap
  18. Hacker Tools Apk Download
  19. Pentest Tools For Windows
  20. Hack Rom Tools
  21. Hacking Tools Github
  22. Hacking Tools Windows 10
  23. Pentest Tools Nmap
  24. Hacker Tools Software
  25. Hack Tools
  26. Pentest Tools Website Vulnerability
  27. Android Hack Tools Github
  28. How To Install Pentest Tools In Ubuntu
  29. Android Hack Tools Github
  30. Hacker Tools Hardware
  31. Hack Tools 2019
  32. Hack Tools For Ubuntu
  33. Pentest Tools Website Vulnerability
  34. Android Hack Tools Github
  35. Pentest Reporting Tools
  36. Hacking Tools Free Download
  37. Game Hacking
  38. Hacking Tools 2020
  39. Termux Hacking Tools 2019
  40. Pentest Tools Github
  41. Pentest Tools For Android
  42. Hacking Tools For Kali Linux
  43. Bluetooth Hacking Tools Kali
  44. Hack App
  45. Pentest Tools Framework
  46. Hacker Search Tools
  47. Hacking Tools Mac
  48. Hack Tools Mac
  49. Hacks And Tools
  50. Hack Tools Download
  51. Hacker Tools Linux
  52. Pentest Tools Github
  53. Hacking Tools For Windows 7
  54. Hacking App
  55. Pentest Tools Review
  56. Easy Hack Tools
  57. Beginner Hacker Tools
  58. Hacking Tools Github
  59. Hacker Tools For Windows
  60. Hacker Tools 2019
  61. Hacking Tools Windows
  62. How To Make Hacking Tools
  63. Game Hacking
  64. Hacking Tools Free Download
  65. Hacking Tools For Windows
  66. Hack Tools Github
  67. Pentest Tools Review
  68. Free Pentest Tools For Windows
  69. Hacking Tools For Windows 7
  70. Black Hat Hacker Tools
  71. Hack Tools Pc
  72. Hacking Tools For Beginners
  73. Termux Hacking Tools 2019
  74. Best Pentesting Tools 2018
  75. Pentest Tools For Mac
  76. Pentest Tools For Android
  77. Hacker Tools List
  78. Underground Hacker Sites
  79. Pentest Tools Alternative
  80. Pentest Tools Website
  81. Pentest Tools Online
  82. Hack Tools
  83. Pentest Reporting Tools
  84. Hacker Tools For Ios
  85. Pentest Tools Url Fuzzer
  86. Pentest Tools Android
  87. World No 1 Hacker Software
  88. Game Hacking

No comments: