Friday, August 28, 2020

Spaghetti: A Website Applications Security Scanner


About Spaghetti
   Author: m4ll0k   Spaghetti is an Open Source web application scanner, it is designed to find various default and insecure files, configurations, and misconfigurations. Spaghetti is built on Python 2.7 and can run on any platform which has a Python environment.

Spaghetti Installation:

Spaghetti's Features:
   Fingerprints:
  • Server:
  • Web Frameworks (CakePHP,CherryPy,...)
  • Web Application Firewall (Waf)
  • Content Management System (CMS)
  • Operating System (Linux,Unix,..)
  • Language (PHP,Ruby,...)
  • Cookie Security
   Discovery:
  • Bruteforce:Admin Interface
    Common Backdoors
    Common Backup Directory
    Common Backup File
    Common Directory
    Common FileLog File
  • Disclosure: Emails, Private IP, Credit Cards
   Attacks:
  • HTML Injection
  • SQL Injection
  • LDAP Injection
  • XPath Injection
  • Cross Site Scripting (XSS)
  • Remote File Inclusion (RFI)
  • PHP Code Injection
   Other:
  • HTTP Allow Methods
  • HTML Object
  • Multiple Index
  • Robots Paths
  • Web Dav
  • Cross Site Tracing (XST)
  • PHPINFO
  • .Listing
   Vulns:
  • ShellShock
  • Anonymous Cipher (CVE-2007-1858)
  • Crime (SPDY) (CVE-2012-4929)
  • Struts-Shock
Spaghetti Example:
python spaghetti --url example.com --scan 0 --random-agent --verbose


Related articles
  1. Pentest Tools For Windows
  2. Hacker Tools Windows
  3. Hacking Tools 2020
  4. Pentest Tools Free
  5. Pentest Tools Website
  6. Hacking Tools 2019
  7. Hack Tools For Mac
  8. Pentest Tools Subdomain
  9. Best Pentesting Tools 2018
  10. Game Hacking
  11. Pentest Tools Alternative
  12. Hacking Tools
  13. Hacking Tools For Windows 7
  14. Pentest Tools Kali Linux
  15. Pentest Automation Tools
  16. Black Hat Hacker Tools
  17. Hack Tools For Games
  18. Hacking Tools Windows 10
  19. Hack Tools Pc
  20. Hacking Tools And Software
  21. Hackrf Tools
  22. New Hack Tools
  23. Pentest Tools Kali Linux
  24. Hacking Tools For Pc
  25. Hack And Tools
  26. Hack Rom Tools
  27. Game Hacking
  28. Bluetooth Hacking Tools Kali
  29. Hack Tools Download
  30. Underground Hacker Sites
  31. Nsa Hacker Tools
  32. Hacker Tools For Ios
  33. Pentest Tools Android
  34. Ethical Hacker Tools
  35. What Is Hacking Tools
  36. Pentest Tools Open Source
  37. Pentest Automation Tools
  38. Beginner Hacker Tools
  39. Hacker Tools
  40. Pentest Tools Subdomain
  41. Pentest Tools Framework
  42. Hack Tools
  43. Hack Tool Apk
  44. Easy Hack Tools
  45. Hacker Tools Free Download
  46. Hack Tools For Mac
  47. Android Hack Tools Github
  48. Hack Tools Pc
  49. Tools 4 Hack
  50. Kik Hack Tools
  51. Beginner Hacker Tools
  52. Pentest Tools Apk
  53. Pentest Tools Github
  54. Pentest Tools Website Vulnerability
  55. Hack Tools Download
  56. Hacker Tools 2019
  57. Hacker Tools Apk
  58. Hacking Tools Pc
  59. Hack Tools Github
  60. Beginner Hacker Tools
  61. Hacker Tool Kit
  62. Hacking Tools Online
  63. Hacker Tools Mac
  64. Best Pentesting Tools 2018
  65. Pentest Tools Kali Linux
  66. Pentest Tools Review
  67. Hack Apps
  68. Hacking Tools 2020
  69. Nsa Hack Tools
  70. Hacker Tools 2019
  71. Hacking Tools For Windows
  72. Hacker Tools Apk Download
  73. Hacker Search Tools
  74. Hacker Security Tools
  75. Pentest Tools For Mac
  76. Best Hacking Tools 2020
  77. Hacker
  78. Hacker Tools For Pc
  79. Pentest Tools For Mac
  80. Pentest Tools Apk
  81. Pentest Tools For Windows
  82. Hack Tools 2019
  83. Pentest Tools For Windows
  84. What Is Hacking Tools
  85. Pentest Reporting Tools
  86. Hacking Apps
  87. Tools Used For Hacking
  88. Pentest Tools Windows
  89. Hacks And Tools
  90. Hacker Tools Apk
  91. Hacker Tools For Pc
  92. Hack And Tools
  93. Hacking Tools Software
  94. Hacking Tools For Pc
  95. Pentest Tools Website
  96. Pentest Tools For Ubuntu
  97. Hacking Tools Mac
  98. Hacking Tools Kit
  99. Tools Used For Hacking
  100. Hacker Tools For Pc
  101. Usb Pentest Tools
  102. Tools Used For Hacking
  103. Hacking Tools Pc
  104. Hack And Tools
  105. Hack Tool Apk No Root
  106. Hacker Tools Apk
  107. Hak5 Tools
  108. Pentest Tools Find Subdomains
  109. Best Pentesting Tools 2018
  110. Pentest Tools Download
  111. Pentest Tools List
  112. Ethical Hacker Tools
  113. Hacking Tools 2020
  114. Hacking Tools Free Download
  115. Hacker Tools For Windows
  116. Blackhat Hacker Tools
  117. Pentest Tools Android
  118. Install Pentest Tools Ubuntu
  119. Tools Used For Hacking
  120. How To Install Pentest Tools In Ubuntu

No comments:

Post a Comment