Skip to content

Instantly share code, notes, and snippets.

@vpnwall-services
Last active May 4, 2023 14:13
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vpnwall-services/a6284cee6529fb417a2a7c2762057c35 to your computer and use it in GitHub Desktop.
Save vpnwall-services/a6284cee6529fb417a2a7c2762057c35 to your computer and use it in GitHub Desktop.
[EPP SEC 101] EPP SEC 101 #epp #sec #101 #debian #web #vuln #scan #spider

EPP SEC 101

  • Skipfish check website skipfish --auth-form https://xxxxxxxxx/login --auth-user xxxxxx --auth-pass='xxxxxxx' -o skipfish_report/ https://xxxxxxx

  • Gospider gospider --cookie 'cookie_name=cookie_value' -s 'https://xxxxxxxx' -o xxxxx_spider.txt

  • Add session cookie to nikto configuration echo 'STATIC-COOKIE="my_session_cookie"="xxxxxx";' >> /etc/nikto.conf

  • Nikto vuln scan from spidering results nikto -h https://xxxxxx -o xxxxx_vuln.txt

  • Wapiti create cookie.json wapiti-getcookie -u xxxx/login -c /tmp/cookie.json

  • Wapiti authenticated scan wapiti -C /tmp/cookie.json -u xxxxx

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment