Section: .. / UNIX / cgi-scanners /
| /// File Name: |
arirang-1.6.tar.gz |
Description:
|
Arirang is a powerful webserver security scanner with many features. Checks over 700 vulnerabilities including the apache chunking bug, IIS .ida buffer overflow, and more. Documentation available here. This is the FreeBSD, OpenBSD, and NetBSD version. Linux and Solaris version available here.
| | Author: | Pilot | | Homepage: | http://www.monkey.org/~pilot/arirang | | File Size: | 54170 | | Last Modified: | Sep 5 01:16:35 2002 |
| MD5 Checksum: | 286cff103eef8a264fefb481230fd9cf |
|
| /// File Name: |
arirang-1.6beta.tar.gz |
Description:
|
Arirang is a powerful webserver security scanner with many features. Checks over 700 vulnerabilities. This is the OpenBSD/NetBSD/FreeBSD version.
| | Author: | Pilot | | Homepage: | http://www.monkey.org/~pilot/arirang | | File Size: | 52791 | | Last Modified: | Jan 25 02:13:14 2002 |
| MD5 Checksum: | e5fbca4ae12308dd8edc11f675841488 |
|
| /// File Name: |
whisker-1.3.0a.tar.gz |
Description:
|
whisker is what I've dubbed a 'next generation' CGI scanner. It is Scriptable. It's a programming-ish language that is tailored to do lots of flexible web scanning. Very stealthy. I've implemented anti-IDS checks into the scan. Includes over 200 checks. Lots of options. Reads in nmap output, files full of domains, or single host. Virtual host support. Proxy support.
| | Changes: | 8 new anti-IDS tactics, scan SSL, alternate file formats, distributed scanning, 200 vulnerabilities, 100 servers, multi-threaded front end, and distributed proxy fixes. Written in perl by rain forest puppy / ADM / wire trip | | File Size: | 51305 | | Last Modified: | Dec 24 04:42:41 1999 |
| MD5 Checksum: | 4a89a0b6b991891c244c9fa6ffd42b0b |
|
| /// File Name: |
ucgi200.c |
Description:
|
CGI vulnerability scanner version 2.00. Checks for 173 CGI vulnerabilities. Tested on linux, freebsd, and irix.
| | Author: | su1d sh3ll of UnlG | | File Size: | 48651 | | Last Modified: | Feb 25 15:35:07 2000 |
| MD5 Checksum: | 8620187c5c513eb141b1865e64607bbd |
|
| /// File Name: |
twwwscan05.zip |
Description:
|
TWWWscan is a Windows based www vulnerability scanner which looks for 227 www/cgi vulnerabilities . Displays http header, server info, and tries for accurate results. Now features anti-IDS url encoding and passive mode scan. Tested on win95 osr2 win98,win98se,win nt4,win 2k/Me.
| | Author: | TSS | | Homepage: | http://search.iland.co.kr/twwwscan | | Changes: | Web Server Detection Improved, added http_port, addded info option, and bugs were fixed. | | File Size: | 45562 | | Last Modified: | Sep 6 01:17:42 2000 |
| MD5 Checksum: | f78a3197f7f3d25c4d244b0be4645a32 |
|
| /// File Name: |
twwwscan04.zip |
Description:
|
TWWWscan is a Windows based www vulnerability scanner which looks for 209 www/cgi vulnerabilities . Displays http header, server info, and tries for accurate results. Now features anti-IDS url encoding and passive mode scan. Tested on win95 osr2 win98,win98se,win nt4,win 2k.
| | Author: | TSS | | Homepage: | http://search.iland.co.kr/twwwscan | | Changes: | Fixed bugs, added more information. | | File Size: | 44180 | | Last Modified: | Jul 22 00:45:14 2000 |
| MD5 Checksum: | 6f460c33704c1b311eda4a4882881bb5 |
|
| /// File Name: |
ucgi240.c |
Description:
|
CGI vulnerability scanner version 2.40. Checks for 407 CGI vulnerabilities.
| | Author: | unlimited group | | Homepage: | http://infected.ilm.net/unlg/ | | File Size: | 40667 | | Last Modified: | May 22 17:21:25 2000 |
| MD5 Checksum: | 7b36d0608ed5ce8aac1fd852cb943d27 |
|
| /// File Name: |
mcgi.tar.gz |
Description:
|
Mass CGI scanner. From Guile Cool.
| | File Size: | 37746 | | Last Modified: | Jan 25 02:40:26 2001 |
| MD5 Checksum: | 771d290353c4888a83b230a32b6fb27f |
|
| /// File Name: |
cgisec.txt |
Description:
|
PERL/CGI Hacking - What makes CGI scripts insecure and how to exploit them.
| | Author: | Tonec. | | File Size: | 37250 | | Last Modified: | Jan 15 00:50:21 2001 |
| MD5 Checksum: | 5649ad7dce8adccef9699054adbc31c0 |
|
| /// File Name: |
whisker-1.2.0.tar.gz |
Description:
|
whisker is what I've dubbed a 'next generation' CGI scanner. It is Scriptable. It's a programming-ish language that is tailored to do lots of flexible web scanning. Very stealthy. I've implemented anti-IDS checks into the scan. Whatmore, I've tested it...and let's just say I haven't seen an IDS so far catch a scan when all the IDS evasion switches are used. ;) Includes over 130 checks. Lots of options. Reads in nmap output, files full of domains, or single host. Virtual host support. Proxy support.
| | Changes: | added patch by Philip Stoev (philip[at]einet.bg) to bounce-scan off of AltaVista's AddURL mechanism. A few limitations, but still very cool. added switch to bounce-scan off of Anonymizer. updated and added various scan scripts. Written in perl by rain forest puppy / ADM / wire trip | | File Size: | 33192 | | Last Modified: | Nov 2 15:10:46 1999 |
| MD5 Checksum: | 0b13a1b32e1a4cbae211e6c4272de5bd |
|
| /// File Name: |
wmap1.3.tar.gz |
Description:
|
Wmap v1.3 is a cgi scanner that attempts to be smarter than most. To increase the chance of finding useful stuff, wmap has a file containing interesting Directories (dirs.db) and other file containing common cgi dirs (dircgis.db) to search for. If a directory is found is added to the test. This include all the directories that are found in the html tags. For each directory found, not only scans for vulnerable CGI's (cgis.db) it scan for interesting files (ex. passwords.tmp) included in the file (file.db) and does an http PUT scan.
| | Author: | ET | | Homepage: | http://pwp.007mundo.com/etorres1 | | Changes: | Many bug fixes. | | File Size: | 31702 | | Last Modified: | Dec 28 22:20:59 2002 |
| MD5 Checksum: | c6ea4d3cb5c9499182cb736b26942b2c |
|
| /// File Name: |
cst1_4.tar.gz |
Description:
|
CST is a java based web scanner that scans using a database of scripts (user editable). The sample databases included contains +1600 possibly vulnerable scripts/dirs. You can scan with or without a proxy server. The scanner has 11 different Anti-IDS tactics and sends fake "X-Forwarded-For:", "Referer:" and "User-Agent:" headers to hide your scan even more. You can also specify a wait time between 2 script fetches. The scanner uses HEAD requests instead of GET for faster scanning, and has support for scanning virtual hosts. You can also specify another port to scan instead of the standard port 80. The scanner outputs the scripts/dirs that return a 200, 403 or 401 HTTP code and outputs the webserver software. A full and comprehensive manual is included.
| | Author: | Toxic Ocean | | Homepage: | http://www.blackhat.be | | File Size: | 30076 | | Last Modified: | Dec 28 20:19:01 2002 |
| MD5 Checksum: | dd65552d1d225d11a0cddb0db3755a27 |
|
| /// File Name: |
Cgi-alt3kx1.0a.c |
Description:
|
The CGI scanner by alt3kx_h3z finds 218 remote CGI vulnerabilities.
| | Author: | Alt3kx_h3z | | Homepage: | http://www.hertmx.org | | File Size: | 25583 | | Last Modified: | Jul 15 17:53:31 2000 |
| MD5 Checksum: | 5c9a928d5e6d9250b2de5a43e3c0e246 |
|
| /// File Name: |
nestea.tgz |
Description:
|
Nestea is a CGI scanner that also looks for forbidden files and directories. It has a database of 2097 vulnerabilities and it takes about 10 minutes to completely scan a host.
| | Author: | Slick | | File Size: | 22929 | | Last Modified: | Nov 20 15:53:01 2005 |
| MD5 Checksum: | 46f15302a0a1fefcedea90065c36b59a |
|
| /// File Name: |
libwhisker-pr3.tgz |
Description:
|
Libwhisker is a perl module for performing whisker CGI vulnerability checks. This is a preview release.
| | Author: | RFP | | Homepage: | http://www.wiretrip.net | | File Size: | 21334 | | Last Modified: | Jul 18 21:28:51 2001 |
| MD5 Checksum: | 859aeb6d3a54ca680487199d965afd49 |
|
| /// File Name: |
cst1_3.tar.gz |
Description:
|
CST contains a script scanner, that scans using a database of scripts (user editable). The sample databases included contains +700 possibly vulnerable scripts/dirs. You can scan with or without a proxy server. The scanner has 11 different Anti-IDS tactics (hex-values, double slashes, self-reference dirs, parameter hiding and session splicing), and sends fake "X-Forwarded-For:", "Referer:" and "User-Agent:" headers to hide your scan even more. You can also specify a wait time between 2 script fetches. The scanner uses HEAD requests instead of GET for faster scanning, and has support for scanning virtual hosts. You can also specify another port to scan instead of the standard port 80. The scanner outputs the scripts/dirs that return a 200, 403 or 401 HTTP code and outputs the webserver software. A full and comprehensive manual is included.
| | Author: | Toxic Ocean | | Homepage: | http://www.blackhat.be | | File Size: | 21332 | | Last Modified: | Apr 24 20:21:19 2001 |
| MD5 Checksum: | 4956b51499007de6c31e5fd22699dbfe |
|
| /// File Name: |
malice5.2.pl |
Description:
|
Malice v.5.2 scans for over 238 cgi vulnerabilities and uses anti-IDS tactics as discussed in RFP's famous whitepaper. Written in perl. Checks for known bugs and interesting directories.
| | Author: | Natas | | Homepage: | http://rsh.defacements.com | | File Size: | 20861 | | Last Modified: | Oct 30 18:53:58 2000 |
| MD5 Checksum: | a4d376fae0f655e944297a37c0873461 |
|
| /// File Name: |
wmap1.2.tar.gz |
Description:
|
Wmap v1.2 is a cgi scanner that attempts to be smarter than most. To increase the chance of finding useful stuff, wmap has a file containing interesting Directories (dirs.db) and other file containing common cgi dirs (dircgis.db) to search for. If a directory is found is added to the test. This include all the directories that are found in the html tags. For each directory found, not only scans for vulnerable CGI's (cgis.db) it scan for interesting files (ex. passwords.tmp) included in the file (file.db) and does an http PUT scan.
| | Author: | ET | | Homepage: | http://pwp.007mundo.com/etorres1 | | File Size: | 17151 | | Last Modified: | Feb 19 01:26:34 2002 |
| MD5 Checksum: | db909b7bb866f015d9152671a46a299f |
|
| /// File Name: |
riven-1.0.1.tar.gz |
Description:
|
Riven is a CGI scanner which uses RFP anti-IDS tactics, flase browser / referer, and a perl/GTK interface.
| | Author: | Zorgon | | File Size: | 16847 | | Last Modified: | Oct 27 03:15:55 2000 |
| MD5 Checksum: | 80be40e874f75a011003990b38d9d684 |
|
| /// File Name: |
cgichk_2.60.tar.gz |
Description:
|
Cgichk is a web vulnerability scanner which automatically searches for a series of interesting directories and files on a given site. Instead of focusing on vulnerable CGI scripts, it looks for interesting and/or hidden directories such as logs, testing, secret, scripts, stats, restricted, code, robots.txt, etc.
| | Author: | Toby Deshane | | Homepage: | http://sourceforge.net/projects/cgichk/ | | Changes: | Added PHP versions of old targets, a couple new targets, some new switches, and bug fixes. | | File Size: | 15972 | | Last Modified: | Apr 8 13:57:31 2001 |
| MD5 Checksum: | 7356d93d0f8b19b226f84fc0e91da66f |
|
| /// File Name: |
cgichk_2.50.tar.gz |
Description:
|
Cgichk is a web vulnerability scanner which automatically searches for a series of interesting directories and files on a given site. Instead of focusing on vulnerable CGI scripts, it looks for interesting and/or hidden directories such as logs, testing, secret, scripts, stats, restricted, code, robots.txt, etc.
| | Author: | Toby Deshane | | Homepage: | http://sourceforge.net/projects/cgichk/ | | Changes: | This version is a somewhat major code rewrite. HTTP requests were fixed (most sites work correctly now). HTTP proxy support was added. User agent identification was added. URL parsing code was rewritten. A couple more targets were added. | | File Size: | 14377 | | Last Modified: | Dec 19 13:17:54 2000 |
| MD5 Checksum: | 0398cb2d6bc5f49434da8cff6981e846 |
|
| /// File Name: |
IISscan2002.pl |
Description:
|
IISscan2002.pl scans for over 97 IIS strings and gets past certain IIS 4 an IIS 5 unicode charter set hot fixes as well as the ability to get cmd.exe access on open IIS servers vulnerable to the unicode flaw.
| | Author: | Thomas O'Connor | | Homepage: | http://www.thomasoconnor.net | | File Size: | 14211 | | Last Modified: | Sep 5 02:25:03 2002 |
| MD5 Checksum: | 8e660cf2c10b6fc3f34c06024fbd8443 |
|
| /// File Name: |
cgi-check99v4.r |
Description:
|
CGI Check 99 v0.4. Checks for 119 remote CGI vulnerabilities and other remote issues. Written in rebol to be extremely portable (37 os's).
| | Author: | Deepquest | | Homepage: | http://www.deepquest.pf | | Changes: | Now gives the Bugtraq ID or X-Force ID when available. | | File Size: | 13711 | | Last Modified: | Nov 18 14:34:50 1999 |
| MD5 Checksum: | 51ec0ea6ff44cafc33a265a3cd6a11cc |
|
| /// File Name: |
httpdtype-0.07.tar.gz |
Description:
|
httpdtype v0.05 is a utility used to find out what type of web server a remote host is running.
| | Author: | Steffen Solyga. | | File Size: | 13704 | | Last Modified: | Aug 16 20:13:34 1999 |
| MD5 Checksum: | 4f09397e5b89c82849df0f62a4ef6d5f |
|
| /// File Name: |
httpdtype-0.05.tar.gz |
Description:
|
httpdtype v0.05 is a utility used to find out what type of web server a remote host is running.
| | Author: | Steffen Solyga. | | File Size: | 13295 | | Last Modified: | Aug 16 20:13:34 1999 |
| MD5 Checksum: | 9000f70fefe1bae26174ae5ecf0c6ef8 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
