Macam-macam Tool web-scanners

Selamat pagi sobat,lama saya tidak pos sesuatu di blog ini, maaf sedang vacum saja. next--Di dunia IT baik yang memakai Os windows atau linux tidak bisa lepas dari utility/tool. Sangat banyak tool-tool bertebaran mulai yang gratis hingga yang berbayar,mulai dari tool buat recovery data sampai tool buat security jaringan dan masih banyak lagi jenisnya.tetapi disini saya akan coba memberi tahu saja tool seputar web-scanners,tool yang banyak digunakan oleh rekan Administrator jaringan tentunya:

1. Burp Suite silahkan cek disini 

 Burp Suite is an integrated platform for attacking web applications. It contains a variety of tools with numerous interfaces between them designed to facilitate and speed up the process of attacking an application. All of the tools share the same framework for handling and displaying HTTP messages, persistence, authentication, proxies, logging, alerting and extensibility. There is a limited free version and also Burp Suite Professional ($299 per user per year)

 Ada versi freenya juga,tool ini berjalan di beberapa platform Linux,Windows,Max Os dengan tampilan Gui

2. Nikto silahkan cek disini

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1200 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated.

Nikto 100% gratis, tool ini berjalan di beberapa platform Linux,Windows,Max Os dengan tampilan Cli/text

3. W3af silahkan cek disini

W3af is an extremely popular, powerful, and flexible framework for finding and exploiting web application vulnerabilities. It is easy to use and extend and features dozens of web assessment and exploitation plugins. In some ways it is like a web-focused Metasploit.

 W3af 100% gratis, tool ini berjalan di beberapa platform Linux,Windows,Max Os dengan tampilan Cli/text

4. Paros Proxy silahkan cek disini

 A Java-based web proxy for assessing web application vulnerability. It supports editing/viewing HTTP/HTTPS messages on-the-fly to change items such as cookies and form fields. It includes a web traffic recorder, web spider, hash calculator, and a scanner for testing common web application attacks such as SQL injection and cross-site scripting.

 Paros Proxy 100% gratis, tool ini berjalan di beberapa platform Linux,Windows,Max Os dengan tampilan Cli/text

5.  WebScarab silahkan cek disini

In its simplest form, WebScarab records the conversations (requests and responses) that it observes, and allows the operator to review them in various ways. WebScarab is designed to be a tool for anyone who needs to expose the workings of an HTTP(S) based application, whether to allow the developer to debug otherwise difficult problems, or to allow a security specialist to identify vulnerabilities in the way that the application has been designed or implemented.

 WebScarab 100% gratis, tool ini berjalan di beberapa platform Linux,Windows,Max Os dengan tampilan Gui.

6.  SqlMap silahkan cek disini

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers. It comes with a broad range of features, from database fingerprinting to fetching data from the DB and even accessing the underlying file system and executing OS commands via out-of-band connections. The authors recommend using the development release from their Subversion repository.

Sqlmap 100% gratis, tool ini berjalan di beberapa platform Linux,Windows,Max Os dengan tampilan Cli/text