ADAPT : Tool That Performs Automated Penetration Testing for WebApps

ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts.

ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outputs categorized findings based on these potential vulnerabilities.

ADAPT also uses the functionality from OWASP ZAP to perform automated active and passive scans, and auto-spidering. Due to the flexible nature of the ADAPT tool, all of theses features and tests can be enabled or disabled from the configuration file. 

ADAPT uses Python to create an automated framework to use industry standard tools, such as OWASP ZAP and Nmap, to perform repeatable, well-designed procedures with anticipated results to create an easly understandable report listing vulnerabilities detected within the web application.

Also Read : Windows 95 : Windows 95 in Electron That Runs on macOS, Linux, and Windows

Automated Tests

OTG-IDENT-004 – Account Enumeration
OTG-AUTHN-001 – Testing for Credentials Transported over an Encrypted Channel
OTG-AUTHN-002 – Default Credentials
OTG-AUTHN-003 – Testing for Weak lock out mechanism
OTG-AUTHZ-001 – Directory Traversal
OTG-CONFIG-002 – Test Application Platform Configuration
OTG-CONFIG-006 – Test HTTP Methods
OTG-CRYPST-001 – Testing for Weak SSL/TLS Ciphers, Insufficient Transport Layer Protection
OTG-CRYPST-002 – Testing for Padding Oracle
OTG-ERR-001 – Testing for Error Code
OTG-ERR-002 – Testing for Stack Traces
OTG-INFO-002 – Fingerprinting the Webserver
OTG-INPVAL-001 – Testing for Reflected Cross site scripting
OTG-INPVAL-002 – Testing for Stored Cross site scripting
OTG-INPVAL-003 – HTTP Verb Tampering
OTG-SESS-001 – Testing for Session Management Schema
OTG-SESS-002 – Cookie Attributes

Installation

  • Download latest version of ADAPT from https://github.com/secdec/ADAPT/releases
  • Extract ADAPT via terminal
    a. tar -xvfz adapt.tar.gz
  • Open a new terminal (ctrl+alt+t)
  • Navigate to the newly decompressed ADAPT folder
    a. Ensure your environment has network access
  • Execute the install script(install.sh)
    a. sudo chmod +x install.sh -ensures install.sh is executable
    b. Type ./install.sh
    c. When prompted, enter your administrator’s password
  • ADAPT should now be ready for configuration
R K

Recent Posts

cp Command: Copy Files and Directories in Linux

The cp command, short for "copy," is the main Linux utility for duplicating files and directories. Whether…

5 days ago

Image OSINT

Introduction In digital investigations, images often hold more information than meets the eye. With the…

5 days ago

cat Command: Read and Combine File Contents in Linux

The cat command short for concatenate, It is a fast and versatile tool for viewing and merging…

5 days ago

Port In Networking

What is a Port? A port in networking acts like a gateway that directs data…

5 days ago

ls Command: List Directory Contents in Linux

The ls command is fundamental for anyone working with Linux. It’s used to display the files and…

6 days ago

pwd Command: Find Your Location in Linux

The pwd (Print Working Directory) command is essential for navigating the Linux filesystem. It instantly shows your…

6 days ago