# data[].attributes.body
is an integrated platform for performing security testing of web applications.

# data[].attributes.body
It’s a cool tool that allows you to scan the websites or network for vulnerabilities in seconds

Nmap.org

Rand

# data[].attributes.body
is an open-source web server scanner that performs comprehensive tests against web servers for multiple items.

Asma

# data[].attributes.attachment_link.readable_text
Nikto 2.5 is an Open Source ( GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated.

Nikto is not designed as a stealthy tool. It will test a web server in the quickest time possible, and is obvious in log files or to an IPS/IDS. However, there is support for LibWhisker's anti-IDS methods in case you want to give it a try (or test your IDS system).

Not every check is a security problem, though most are. There are some items that are "info only" type checks that look for things that may not have a security flaw, but the webmaster or security engineer may not know are present on the server. These items are usually marked appropriately in the information printed. There are also some checks for unknown items which have been seen scanned for in log files.

Features
Here are some of the major features of Nikto. See the documentation for a full list of features and how to use them.

IPv6 support (new!)

SSL support (Unix with OpenSSL or Windows with ActiveState's
Perl/NetSSL)

Full HTTP proxy support

Checks for outdated server components

Save reports in plain text, SQL, XML, HTML, NBE, JSON, or CSV

Template engine to easily customize reports

Scan multiple ports on a server, or multiple servers via input file (including nmap output)

LibWhisker's IDS encoding techniques

Identifies installed software via headers, favicons and files

Host authentication with Basic and NTLM support

Subdomain guessing

Apache and cgiwrap username enumeration

Mutation techniques to "fish" for content on web servers

Scan tuning to include or exclude entire classes of vulnerability
checks

Guess credentials for authorization realms (including many default id/pw combos)

Authorization guessing handles any directory, not just the root
directory

Enhanced false positive reduction via multiple methods: headers,
page content, and content hashing

Reports "unusual" headers seen

Interactive status, pause and changes to verbosity settings

Save full request/response for positive tests

Replay saved positive requests

Maximum execution time per target

Auto-pause at a specified time

Checks for common "parking" sites

Thorough documentation

# data[].attributes.attachment_link.description
Nikto 2.5 is an Open Source ( GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers.

# data[].attributes.body
capture and display real-time details of network traffic

To download it: https://www.wireshark.org/download.html

shouq

# data[].attributes.body
Faisal Bakhurji - Team 2

dirb:

dirb is a directory enumeration tool that uses its own wordlist file or your own to try to enumerate and find directories in a target domain.

# data[].attributes.attachment_link.description
Web Fuzzer. Contribute to v0re/dirb development by creating an account on GitHub.

# data[].attributes.body
Nmap :

Nmap (“Network Mapper”) is a free and open source utility for network exploration and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics .

https://nmap.org/book/nmap-overview-and-demos.html

# data[].attributes.body
A tool to discover subdomains of a website using search engines.

Zahra

# data[].attributes.body
an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

Eman

# data[].attributes.attachment_link.title
sqlmap: automatic SQL injection and database takeover tool

# data[].attributes.attachment_link.description
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

# data[].attributes.body
Nmap is short for Network Mapper. It is an open-source Linux command-line tool that is used to scan IP addresses and ports in a network and to detect installed applications.

Amjad

# data[].attributes.body
A tool to analyze DNS information and find vulnerabilities in DNS settings.

Zahra

# data[].attributes.body
Pentest-Tools Web site

Built by a team of experienced penetration testers, Pentest-Tools.com is a web-based platform that speeds-up the common steps performed in almost every assessment: reconnaissance, vulnerability scanning, exploitation, and report writing. Using the 20+ built-in tools, you get quick insights into targets' weaknesses so you know where to dig deeper, pop shells, and have fun.