EH-Net

Ethical Hacking Discussions and Related Certifications => Web Applications => Topic started by: nitro on July 04, 2010, 05:22:03 AM

Title: ASPX web pages scanner
Post by: nitro on July 04, 2010, 05:22:03 AM

I want to scan ASPx web pages. Is there any software for doing it? Does anyone have any doc that can help me?

I know how to do it with php pages from Sql injection to XSS attack But do not know how to about ASPx?

Title: Re: ASPX web pages scanner
Post by: viruz on July 04, 2010, 08:31:49 AM

try http://google.com

Title: Re: ASPX web pages scanner
Post by: nitro on July 04, 2010, 11:34:31 PM

I tried it before but don't get anything. I only know Acunetix scans ASPX webpages. But is there more? I want also some doc & tutorial for ASPX web pages penetration testing.

Title: Re: ASPX web pages scanner
Post by: vekarman on July 05, 2010, 07:02:03 AM

Nitro,

Did you try Nessus? Configure Nessus with web application scanning parameters set ad then scan the application. Might help.

Title: Re: ASPX web pages scanner
Post by: Ketchup on July 05, 2010, 09:18:30 AM

Try w3af. It's a great open-source all purpose web-app scanner. You can also try an intercepting proxy tool, such as WebScarab. Both tools have a *nix and a Windows version.

Title: Re: ASPX web pages scanner
Post by: nitro on July 05, 2010, 11:55:35 PM

I tried nessus later. Now will try W3AF.
Welcome to more commments...!?

Title: Re: ASPX web pages scanner
Post by: secureseven on July 07, 2010, 05:10:55 PM

W3AF is great. I'm going to be writing a short intro on it and maybe a 10 min video on basic functionality etc. :D

Title: Re: ASPX web pages scanner
Post by: H1t M0nk3y on July 08, 2010, 07:25:03 AM

That would be great secureseven!

I am starting this morning looking at this framework.

Title: Re: ASPX web pages scanner
Post by: vekarman on July 08, 2010, 07:33:53 AM

From this version onwards, you will also get proxy feature now.

Very nice application. I prefer it over Nessus. But it slipped out of my mind!!