Daily Diary

Web-fu Is a web hacking tool focused on discovering and exploiting web vulnerabilitites.

 BROWSER INTEGRATION 

This tool has many advantages, as a browser-embedded webhacking tool, is very useful for scanning browser-authenticated applications, if browser can authenticate and access to the web application, the tool also can. Note that some other tools do not support neither certificate authentication nor web vpn accesses.
The integration with chrome, provides a more comfortable and agile way of web-hacking, and you have all the application data loaded on the hacking tool, you don't need to copy the url, cookies, etc. to the tool, just right click and hack.
The browser rendering engine is also used in this tool, to draw the html of the responses.


 FALSES POSITIVES 

When I coded this tool, I was obsessed with false positives, which is the main problem in all detection tools.  I have implemented a gauss algorithm, to reduce the faslse positives automatically which works very very well, and save a lot of time to the pentester.


 VIDEO 

 Here is a video, with some of the web-fu functionalitites:

 VISUAL FEATURES 

This tool has a visual crawler. Normal crawlers doesn't parse the ajvascript, this tool does. The visual crawler loads each link of the web site, rendering the html and executing all the javascript as a normal load, then the links are processed from he DOM and clicked.
A visual form cracker, is also available, althow is experimental and only works on some kind of forms.


 SCANNING FEATURES

The web-fu's portscanner, has a database of a common web ports, like 80,81,8080 and so on.
The cracker module, can bruteforce web directories to find new attack vectors, and can fuzz get and post parameters for discovering vulns, and also crack passwords. There are 9 preloaded wordlists, and you can also load a custom wordlist. Prefilters, falsepositive reductor and render will be helpful. The scanners support SSL, if the website can be loaded in the chrome, can be scanned by web-fu.


ENCODERS & DECODERS

The supported encoders and decoders are: base64, urlescape and urlencode


OTHER FEATURES

A web notepad is available, saving the information on the browser localStorage, there is one notepad per site. A cookie editor is also very useful for pentesting. The inteceptor, is like a web proxy but from the inside of the browser, you can intercept a request There is also a session locker and a exploit web search.


CHROME STORE 
Here is the link to the chrome store, the prize is about one euro, very cheap if you compare with other scanners: Web-Fu on Chrome Store


 With webfu, you will do the best web site pentest and vulnerability assessment.


Related posts

1. Hacker Tools For Windows
2. Pentest Tools Website Vulnerability
3. Hack Rom Tools
4. Pentest Tools Windows
5. Pentest Tools Github
6. Easy Hack Tools
7. How To Make Hacking Tools
8. Hack Tools For Ubuntu
9. Game Hacking
10. Hacker Techniques Tools And Incident Handling
11. Pentest Box Tools Download
12. Best Hacking Tools 2019
13. Hack And Tools
14. Hacking Tools Usb
15. Pentest Tools Url Fuzzer
16. Hackers Toolbox
17. Hacking Tools Kit
18. Pentest Automation Tools
19. Hack Tool Apk No Root
20. Hacker Tools Online
21. Pentest Tools Review
22. Pentest Tools Alternative
23. Hacker Hardware Tools
24. Hacker Tools Linux
25. Hacking Tools Hardware
26. Hack Tools
27. Pentest Tools Url Fuzzer
28. Best Hacking Tools 2019
29. Black Hat Hacker Tools
30. Physical Pentest Tools
31. Pentest Tools
32. Hacking Tools Windows
33. Hacking Tools For Mac
34. Pentest Tools Framework
35. Hacking Tools For Games
36. Hackrf Tools
37. Pentest Tools Port Scanner
38. Usb Pentest Tools
39. Hack Tools For Windows
40. Hacker Search Tools
41. Hacker Tools For Ios
42. Pentest Tools Github
43. Hack Tools For Windows
44. Pentest Tools Linux
45. Nsa Hack Tools
46. Hacker Hardware Tools
47. Hacking Tools Windows
48. Hacking Tools Hardware
49. Hacker Tools Windows
50. Computer Hacker
51. Hacker Tools Apk
52. Hacking Tools Online
53. Computer Hacker
54. Pentest Tools Subdomain
55. Hacker
56. Hacking Tools Windows 10
57. Nsa Hack Tools Download
58. Hack Tools Download
59. Pentest Tools
60. Pentest Tools For Ubuntu
61. Hackers Toolbox
62. Hacking Tools Mac
63. Pentest Recon Tools
64. Pentest Automation Tools
65. Bluetooth Hacking Tools Kali
66. Hack Tools Pc
67. Hacker Techniques Tools And Incident Handling
68. Pentest Tools Website Vulnerability
69. Pentest Tools Android
70. How To Make Hacking Tools
71. Hacking Tools For Games
72. Pentest Tools Download
73. Kik Hack Tools
74. Hacking Tools Kit
75. Hacking Tools For Windows Free Download
76. Pentest Tools Alternative
77. How To Install Pentest Tools In Ubuntu
78. Hacking Tools Free Download
79. Wifi Hacker Tools For Windows
80. Hacker Tools Free
81. Hacker Tools Free Download
82. Tools For Hacker
83. Hak5 Tools
84. Top Pentest Tools
85. Pentest Tools Alternative
86. How To Install Pentest Tools In Ubuntu
87. Pentest Tools Android
88. Hacking Tools For Windows
89. Wifi Hacker Tools For Windows
90. Nsa Hack Tools
91. Hacking Tools For Games
92. World No 1 Hacker Software
93. Pentest Tools Website Vulnerability
94. Hack Tools For Mac
95. Github Hacking Tools
96. Pentest Tools Alternative
97. Pentest Tools Nmap
98. Hack Tools For Games
99. Android Hack Tools Github
100. Nsa Hack Tools
101. Hacker Tools For Ios
102. Hacking Tools For Games
103. Hacker Techniques Tools And Incident Handling
104. Wifi Hacker Tools For Windows
105. Hacker Tools Online
106. Hacker Search Tools
107. Android Hack Tools Github
108. Hacking Tools For Pc
109. Hacking Tools For Mac
110. Hacker Tools Free
111. Hack Tools For Ubuntu
112. Nsa Hack Tools Download
113. Hacking Tools Github
114. Hack Tools Mac
115. Hacker Tools For Ios
116. Hacker Tools List
117. Best Hacking Tools 2019
118. Hacker
119. Hacker Tools Software
120. Hack Tools
121. Hacking Tools For Mac
122. Pentest Reporting Tools
123. Underground Hacker Sites
124. Hack Tools Download
125. Hack Tools For Mac