News for hackers. Stuff that matters.
Re:NAVEX: Precise and scalable exploit generation for dynami... by doublerebel on Monday September 10, 2018 @04:51PM (#17955097)
for dynamic PHP web applications. Other languages are not yet supported.
[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by dvh on Monday September 10, 2018 @03:46PM (#17954564)
Similar tools: skipfish, wapiti
[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by bellinom on Monday September 10, 2018 @05:55PM (#17955557)
Skipfish and wapiti are quite a bit different than this. They are simply blackbox scanners that attempt to crawl a webpage and look for common issues, mostly by trial and error. This is examining the source code of an application, finding all the sinks, building a graph, and working backwards through the graph to find sources that can pass input to the vulnerable sinks.
[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by _pdp_ on Monday September 10, 2018 @04:24PM (#17954887)
Shameless plug scanner.secapps.com - tests are executed in your browser.
[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by tingletech on Monday September 10, 2018 @05:34PM (#17955409)
I get a blank page with a couple of console errors when I visit that URL (Safari on OS X)

Edit: Not sure why I'm getting downvoted -- the parent tool sounded interesting, but I get a blank page and these errors on the console https://gist.github.com/tingletech/153118cb3078fe2667a3874f0...

[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by blacksmith_tb on Monday September 10, 2018 @07:27PM (#17955996)
Looks like it is intended to work in FF and Chrome only [1] judging by its extension.

1: https://secapps.com/extension

[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by _pdp_ on Tuesday September 11, 2018 @04:46AM (#17958099)
Yes. There is currently pretty poor support for Safari and specifically IE but we are working on it.
[ Parent | on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami... by nigifabio on Tuesday September 11, 2018 @01:35AM (#17957410)
Far for being the same, did you read the article? It’s not a simple vuln scanner
[ Parent | on HN ]