Whatweb web app vulnerability Scanner 0.4.9

welcome to hacking a rise in this post i will show u how to use whatweb a simple vulnerability scanner pre installed on kali linux

What is Whatsweb

WhatWeb is a next generation web scanner. WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1000 plugins, each to recognise something different. Find more here

Whatweb can identify all sorts of information about a live website, like:

Platform
CMS platform
Type of Script
Google Analytics
Web server Platform
IP address, Country
900+ Plugins & their libraries used
Server Headers, Cookies and a lot more.

Whatweb offers both passive scanning and aggressive testing. Passive scanning just extracts data from HTTP headers simulating a normal visit. Aggressive options get deeper with recursion & various types of queries & identify all technologies just like a vulnerability scanner.
Options

Syntax of whatweb

Options is deprecated. Only major options or listed. Visit tool homepage for complete options

TARGET SELECTION:
Enter URLs, filenames or nmap-format IP ranges.
–input-file=FILE, -i Identify URLs found in FILE, eg. -i /dev/stdin

TARGET MODIFICATION:
–url-prefix Add a prefix to target URLs
–url-suffix Add a suffix to target URLs
–url-pattern Insert the targets into a URL. Requires –input-file,

AGGRESSION:
The aggression level controls the trade-off between speed/stealth and reliability.
–aggression, -a=LEVEL Set the aggression level. Default: 1
Aggression levels are: 1,2,3 & 4

HTTP OPTIONS:
–user-agent, -U=AGENT Identify as AGENT instead of WhatWeb/0.4.8-dev.
–follow-redirect=WHEN Control when to follow redirects.Default: always
–max-redirects=NUM Maximum number of contiguous redirects. Default: 10

AUTHENTICATION:
–user, -u= HTTP basic authentication
Add session cookies with –header, e.g. –header “Cookie: SESSID=1a2b3c;”

PROXY:
–proxy Set proxy hostname and port Default: 8080
–proxy-user Set proxy user and password

PLUGINS:
–list-plugins, -l List all plugins

OUTPUT:
–verbose, -v Verbose output includes plugin descriptions. Use twice for debugging.
–colour,–color=WHEN control whether colour is used. WHEN=’always’, ‘never’ or ‘auto’
–quiet, -q Do not display brief logging to STDOUT
–no-errors Suppress error messages

LOGGING:
–log-brief=FILE Log brief, one-line output
–log-verbose=FILE Log verbose output
–log-xml=FILE Log XML format

PERFORMANCE & STABILITY:
–max-threads, -t Number of simultaneous threads. Default: 25.
–open-timeout Time in seconds. Default: 15
–read-timeout Time in seconds. Default: 30
–wait=SECONDS Wait SECONDS between connections

HELP & MISCELLANEOUS:
–help, -h This help
–debug Raise errors in plugins
–version Display version information. (WhatWeb 0.4.8-dev)

How to use Whatsweb

open terminal and type whatweb https://hackingarise20.home.blog/

what see a little more detail use the -v Display version information whatweb -v https://hackingarise20.home.blog

There ya have it lads nice and easy see when using what web it automatic use all the plug ins for this scanner to work to see the plug ins type whatweb -l
WhatWeb Plugin List

Plugin Name – Description
——————————————————————————–

Hacking Wordpress

Welcome back two hacking a rise i am the laughing-man today we are going to hack a wordpress site so for this i mead a site for this tutorial coz we dont wanna get locked up now do we lol this tool comes installed on Kali Linux

What is wpscan

WPScan is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security issues.

Source: http://wpscan.org/

How to use Wpscan

so open terminal and type wpscan --help

this the help command this is gave out the perfix for the tools

now we are going to do a simple scan on a wp site so in terminal type wpscan --url http://laughingman.getenjoyment.net/

Now lads we wanna see who is the users of the site so we type wpscan --url http://laughingman.getenjoyment.net/ --enumerate u

now we wanna brute the users names since im the Laughingman i will brute my own account so type wpscan --url http://laughingman.getenjoyment.net/ -U Laughingman -P /root/Desktop/wordlist1
-p = path to password list
-U = the user u want to hack

Disclamer

we here at hacking a rise take no responsibility for are users actions this is pure for educational reasons for peopel studying to be a pentester and sitting there CEH exam

XSS DORKING

welcome to hacking a rise i’m the one and only laughing man i am him lol this post is a list of google dorks for xss “cross scripting vulnerabilities” websites copy and and paste to google yahoo or bing what ever floats your boat just make sure your dumbass is hiding

HERE’S A LIST OF XSS DORKS FOR GOOGLE

XSS Dorks

Code:
inurl:”.php?cmd=”
inurl:”.php?z=”
inurl:”.php?q=”
inurl:”.php?search=”
inurl:”.php?query=”
inurl:”.php?searchst­ring=”
inurl:”.php?keyword=­”
inurl:”.php?file=”
inurl:”.php?years=”
inurl:”.php?txt=”
inurl:”.php?tag=”
inurl:”.php?max=”
inurl:”.php?from=”
inurl:”.php?author=”
inurl:”.php?pass=”
inurl:”.php?feedback­=”
inurl:”.php?mail=”
inurl:”.php?cat=”
inurl:”.php?vote=”
inurl:search.php?q=
inurl:com_feedpostol­d/feedpost.php?url=
inurl:scrapbook.php?­id=
inurl:headersearch.p­hp?sid=
inurl:/poll/­default.asp?catid=
inurl:/­search_results.php?se­arch=

xp : http://host/php/index.php?lang=[XSS]
POP: http://host/php/index.php?lang=

XSS BL4CKH4T G4N3$H GROUP

How to set Burp suite proxy

Burp suite is one the best tools for web app testing it has many options e.g SQL injection, Brute force fuzzing etc.. Burp suite is installed on Kali Linux so u don’t have to in stall to run in open terminal and type burp suite or go to applications in the left hand top corner of your screen navigate to web app analysis its the top one.

Lets start

open fire fox and type about:preferences in the addressee bar this will take you to the settings here you will need to go to networks proxy its at the bottom of the page

click on it and go to manual proxy configuration then i want you to tick the use this proxy server for all protocols now set the http proxy to 127.0.0.1 and the port to 8080 tick proxy DNS when using socks5 and hit ok

now open up burp suite

and click next and click next one more time till u come to this screen

you mite see proxy is glowing red wel click is and make sure intercept is on like so

ALL Right lets see this connected right go back to Firefox and search for anything if this pops up u are connected

so lets go back to burp suite and hit the forward button a few times so u can forward the requests for google search the page should work or you can easy just add google to the no proxy’s in network proxy’s

anyways my next burp suite post will be on how to perform attacks wwith burp suite hope u like this posts lads and thank you for reading