Spaghetti: A Website Applications Security Scanner


About Spaghetti
   Author: m4ll0k   Spaghetti is an Open Source web application scanner, it is designed to find various default and insecure files, configurations, and misconfigurations. Spaghetti is built on Python 2.7 and can run on any platform which has a Python environment.

Spaghetti Installation:

Spaghetti's Features:
   Fingerprints:
  • Server:
  • Web Frameworks (CakePHP,CherryPy,...)
  • Web Application Firewall (Waf)
  • Content Management System (CMS)
  • Operating System (Linux,Unix,..)
  • Language (PHP,Ruby,...)
  • Cookie Security
   Discovery:
  • Bruteforce:Admin Interface
    Common Backdoors
    Common Backup Directory
    Common Backup File
    Common Directory
    Common FileLog File
  • Disclosure: Emails, Private IP, Credit Cards
   Attacks:
  • HTML Injection
  • SQL Injection
  • LDAP Injection
  • XPath Injection
  • Cross Site Scripting (XSS)
  • Remote File Inclusion (RFI)
  • PHP Code Injection
   Other:
  • HTTP Allow Methods
  • HTML Object
  • Multiple Index
  • Robots Paths
  • Web Dav
  • Cross Site Tracing (XST)
  • PHPINFO
  • .Listing
   Vulns:
  • ShellShock
  • Anonymous Cipher (CVE-2007-1858)
  • Crime (SPDY) (CVE-2012-4929)
  • Struts-Shock
Spaghetti Example:
python spaghetti --url example.com --scan 0 --random-agent --verbose


Read more


  1. Pentest Tools Port Scanner
  2. Best Pentesting Tools 2018
  3. Pentest Tools Website Vulnerability
  4. Pentest Tools Port Scanner
  5. Hacking Tools For Kali Linux
  6. Pentest Tools Website Vulnerability
  7. Hacking Tools For Beginners
  8. Hacker Tools Free Download
  9. Hack Tools
  10. Pentest Tools Framework
  11. Pentest Tools List
  12. Hacking Tools Mac
  13. Hacking Tools Github
  14. What Is Hacking Tools
  15. Hacking Tools For Windows Free Download
  16. Ethical Hacker Tools
  17. Pentest Tools Tcp Port Scanner
  18. Hacking Tools For Kali Linux
  19. Pentest Tools Find Subdomains
  20. Pentest Tools Android
  21. Best Pentesting Tools 2018
  22. Hacker Security Tools
  23. Hacker Tools Linux
  24. Hacker Techniques Tools And Incident Handling
  25. Pentest Tools For Android
  26. Hacker Tools 2020
  27. Blackhat Hacker Tools
  28. Pentest Tools Alternative
  29. Hacker Tools For Pc
  30. Pentest Tools
  31. Hacker Tools Linux
  32. Hack And Tools
  33. Hacker Hardware Tools
  34. Hacking Tools For Games
  35. Hacking Tools Windows
  36. Wifi Hacker Tools For Windows
  37. Hacker Tool Kit
  38. Hack App
  39. Hacker Tools Online
  40. Tools 4 Hack
  41. Hacker Tools Free
  42. Pentest Tools For Windows
  43. Hack Tool Apk No Root
  44. Hack Tools For Windows
  45. Hack Tools For Mac
  46. Pentest Tools
  47. Hacker Tools For Mac
  48. Underground Hacker Sites
  49. Hack Tools For Pc
  50. Hacker Security Tools
  51. Pentest Tools Online
  52. Hacker Tools Windows
  53. Pentest Tools Subdomain
  54. Hacking Tools Mac
  55. Nsa Hacker Tools
  56. Pentest Tools Nmap
  57. Best Pentesting Tools 2018
  58. Hacking Tools Windows 10
  59. Underground Hacker Sites
  60. Best Hacking Tools 2019
  61. Hack Tools For Mac
  62. Pentest Tools Website
  63. Hacking App
  64. Pentest Tools For Windows
  65. Hacking Tools For Pc
  66. Ethical Hacker Tools
  67. Hacker Hardware Tools
  68. Hacker Tools Free Download
  69. Bluetooth Hacking Tools Kali
  70. Hacking Tools For Pc
  71. Pentest Recon Tools
  72. Hacking Tools 2020
  73. Pentest Tools List
  74. Hack Tools For Windows
  75. Best Pentesting Tools 2018
  76. Hacker Tools Windows
  77. Hacker Tools Online
  78. Pentest Tools For Windows
  79. Termux Hacking Tools 2019
  80. Hacker Tools Mac
  81. Android Hack Tools Github
  82. Nsa Hack Tools Download
  83. Hacking Tools Free Download
  84. Pentest Reporting Tools
  85. Best Hacking Tools 2020
  86. Hack Tool Apk
  87. Pentest Recon Tools
  88. Pentest Tools Windows
  89. Hacker Techniques Tools And Incident Handling
  90. Pentest Tools Download
  91. Hack Tools 2019
  92. Hacker Tools Linux
  93. Android Hack Tools Github
  94. Best Hacking Tools 2020
  95. Hack Tools 2019
  96. Hacker Tool Kit
  97. Pentest Tools For Ubuntu
  98. Hacking Tools Name
  99. Pentest Tools Website Vulnerability
  100. Hack Tool Apk
  101. Ethical Hacker Tools
  102. Hack Tools For Windows
  103. Pentest Tools Framework
  104. Hackrf Tools
  105. Pentest Tools For Android
  106. Android Hack Tools Github
  107. Best Hacking Tools 2020
  108. Hack Tools For Pc
  109. Hack Tools
  110. Ethical Hacker Tools
  111. Pentest Tools For Android
  112. Pentest Tools Subdomain
  113. Nsa Hack Tools Download
  114. Hacking Tools Name
  115. Hack And Tools
  116. Hacking Tools Windows 10
  117. How To Install Pentest Tools In Ubuntu
  118. Kik Hack Tools
  119. Tools For Hacker
  120. Pentest Tools Tcp Port Scanner
  121. Hack Tools 2019
  122. Pentest Tools Url Fuzzer
  123. Hacking Tools For Mac
  124. Hacker Tools 2019
  125. Hack And Tools
  126. Hacker Tools Windows
  127. Install Pentest Tools Ubuntu
  128. Hackrf Tools
  129. Hacking Tools
  130. Pentest Tools Port Scanner
  131. Pentest Tools Website Vulnerability
  132. Pentest Tools Review
  133. Hacking Tools For Windows Free Download
  134. Pentest Tools Open Source
  135. What Are Hacking Tools
  136. Hacking Tools Windows 10
  137. Hacker Tools List
  138. Hacker Tools Hardware
  139. Pentest Tools Bluekeep
  140. Hacking Tools Name
  141. Bluetooth Hacking Tools Kali
  142. Nsa Hack Tools Download
  143. Hak5 Tools
  144. Hack Tools
  145. Usb Pentest Tools
  146. Hack Tools For Ubuntu
  147. Hacker Tools Linux
  148. Hacker Tools For Ios
at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)