Re:NAVEX: Precise and scalable exploit generation for dynami...
by dvh on Monday September 10, 2018 @03:46PM
(#17954564)
Similar tools: skipfish, wapiti
[ Parent
| on HN ]
Re:NAVEX: Precise and scalable exploit generation for dynami...
by bellinom on Monday September 10, 2018 @05:55PM
(#17955557)
Skipfish and wapiti are quite a bit different than this. They are simply blackbox scanners that attempt to crawl a webpage and look for common issues, mostly by trial and error. This is examining the source code of an application, finding all the sinks, building a graph, and working backwards through the graph to find sources that can pass input to the vulnerable sinks.
Re:NAVEX: Precise and scalable exploit generation for dynami...
by _pdp_ on Monday September 10, 2018 @04:24PM
(#17954887)
Shameless plug scanner.secapps.com - tests are executed in your browser.
Re:NAVEX: Precise and scalable exploit generation for dynami...
by tingletech on Monday September 10, 2018 @05:34PM
(#17955409)
I get a blank page with a couple of console errors when I visit that URL (Safari on OS X)
Edit: Not sure why I'm getting downvoted -- the parent tool sounded interesting, but I get a blank page and these errors on the console https://gist.github.com/tingletech/153118cb3078fe2667a3874f0...
Re:NAVEX: Precise and scalable exploit generation for dynami...
by blacksmith_tb on Monday September 10, 2018 @07:27PM
(#17955996)
Looks like it is intended to work in FF and Chrome only [1] judging by its extension.