Web Application Analysis

Home Web Application Analysis

Web Applications Tools

Ua-tester – A tool for User Agent WAF, IDS/IPS, Redirection testing

Web Application Analysis Ravi Sankar - July 3, 2018

UA-tester is a tool to check whether a website provides different pages for different user agents like for mobile, desktop...

SQLMAP – Introduction & Automation of SQLi

Web Application Analysis Ravi Sankar - November 29, 2015

Basic Operation of SQLMAP & enumeration of Server through automatic SQL Injection. SQLMAP is a database pentesting tool used to automate SQL...

SQLMAP – Enumeration of Databases & Users from Vulnerable Web Forms

Web Application Analysis Ravi Sankar - July 3, 2018

Sqlmap is a database assessment tool which pentesters & security researchers can use to enumerate databases of various types. Sqlmap...

Burpsuite – A Beginner’s Guide For Web Application Security or Penetration Testing

Web Application Analysis Ravi Sankar - July 6, 2018

Burpsuite is a collection of tools bundled into a single suite made for Web Application Security or Penetration testing. It's...

Burpsuite – Use Burp Intruder to Bruteforce Forms

Web Application Analysis Ravi Sankar - October 11, 2016

Using Burp Intruder to Bruteforce passwords. Burpsuite is a collection of tools and plugins for any web application security testing bundled...

whatweb – Tool to Discover Security Vulnerabilities With Your Web Application

Web Application Analysis Ravi Sankar - July 11, 2018

Whatweb is the perfect name for this tool. Simply it answers the question, “What is that Website?” Whatweb can identify...

XenoScan – Open source memory scanner written in C++

Ranjith - October 8, 2018

XenoScan is a memory scanner which can be used to scan the memory of processes to locate the specific locations of important values. These...

Exploit CVE-2017-6079 – Blind Command Injection In Edgewater Edgemarc Devices Exploit

Ranjith - September 26, 2018

This exploit was developed based on the technical description by depthsecurity https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that...