Web安全扫描工具WebCruiser - Web Vulnerability Scanner

一个小巧但功能不凡的Web应用漏洞扫描器，能够对整个网站进行漏洞扫描，并能够对发现的漏洞（SQL注入，跨站脚本，XPath注入等）进行验证；它也可以单独进行漏洞验证，作为SQL注入工具、XPath注入工具、跨站检测工具使用。

运行平台：Windows with .Net FrameWork 2.0或以上。

界面语言：英文版

功能简介：

* 网站爬虫（目录及文件）；

* 漏洞扫描（SQL注入，跨站脚本，XPath注入）；

* 漏洞验证（SQL注入，跨站脚本，XPath注入）；

* SQL Server明文/字段回显/盲注；

* MySQL字段回显/盲注；

* Oracle字段回显/盲注；

* DB2字段回显/盲注；

* Access字段回显/盲注；

* 管理入口查找；

* GET/Post/Cookie 注入；

* 搜索型注入延时；

* 自动从自带浏览器获取Cookie进行认证；

* 自动判断数据库类型；

* 自动获取关键词；

* 多线程；

* 高级：代理、敏感词替换/过滤;

* 报告；

－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－

WebCruiser - Web Vulnerability Scanner

WebCruiser - Web Vulnerability Scanner, a compact but powerful web security scanning tool! It has a Crawler and Vulnerability Scanner(SQL Injection, Cross Site Scripting, XPath Injection etc. ).

It can support scanning website as well as POC( Prooving of concept) for web vulnerabilities: SQL Injection, Cross Site Scripting, XPath Injection etc. So, WebCruiser is also a SQL Injector, a XPath Injector , and a Cross Site Scripting tool!

Function:

* Crawler(Site Directories And Files);

* Vulnerability Scanner(SQL Injection, Cross Site Scripting, XPath Injection etc.);

* POC(Proof of Concept): SQL Injection, Cross Site Scripting, XPath Injection etc.;

* GET/Post/Cookie Injection;

* SQL Server: PlainText/FieldEcho(Union)/Blind Injection;

* MySQL/Oracle/DB2/Access: FieldEcho(Union)/Blind Injection;

* Administration Entrance Search;

* Time Delay For Search Injection;

* Auto Get Cookie From Web Browser For Authentication;

* Report Output.