How To Scan a Website for Vulnerabilities In ( Backtrack / Kali Linux )

Hello guys, today I'm going to show you how to scan for vulnerabilities in a website, or all the websites in the server. In this tutorial I will use a program in BackTrack called UniScan. it's very easy to use, but very good in scanning. First of all, open your terminal and type this command: 

cd /pentest/web/uniscan && ./uniscan.pl

Something like this will be printed on your terminal. Now all we have to do is follow the instructions. First of all we need a target to scan, I've chose one already and I will use it in my pictures. To start the scan, first you have to check the options which you want to use in your scan.
 # HOW TO USE OPTIONS: Check the letter beside your option, and include it after the URL like this:

 ./uniscan.pl -u http://www.website.com/ -b -q -d -w

or put them all together.

 ./uniscan.pl -u http://www.website.com/ -bqdw 

This will start your scan with all the different options you included.
  NOTE:- NEVER FORGET THE FORWARD SLASH AT THE END OF THE LINK IN THE COMMAND!! Now the scan will start, and the terminal will look something like this:


This scan will scan for vulnerabilities like SQL-i / LFI / RFI and so on. It also searches for Webshells, backdoors, PHP info disclosure, Emails, and much more. Here are some examples: PHP.info() disclosure:


External Links/Hosts:

Source Code disclosure:

Dynamic Scan, Vulnerability Identification:


This program can also get all the sites in a server, and then you will be able to scan all of them. To do that, run this command:

 ./uniscan.pl -i "ip:127.0.0.1"

 Change 127.0.0.1 to your target server. All the websites will be stored in "sites.txt" in the same directory. Now to scan those sites in the list, run this command:

 ./uniscan.pl -f sites.txt -bqwd 

You can change the options to whatever you want.

I Hope You Enjoyed  , thanks to Zamil for this Great Tutorial  ...!!!
If You Have any Question or Problem Comment Below

Social Engineering Toolkit ( Backtrack / Kali Linux )

The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. Originally this tool was designed to be released with the http://www.social-engineer.org launch and has quickly become a standard tool in a penetration tester’s arsenal. SET was written by David Kennedy (ReL1K) and with a lot of help from the community in incorporating attacks never before seen in an exploitation toolset. The attacks built into the toolkit are designed to be targeted a focused attacks against a person or organization used during a penetration test.

 

Features of SET

 

1. Spear Phishing Attack vector
2. Website Attack Vector
3. Infectious media generator
4. Create a Payload and Listener
5. Mass Mail Attack
6. Teensy USB HID Attack vector
7. SMS Spoofing Attack Vector
8. Wireless Access Point Attack Point
9. Third Party Modules
   

How to Use Social Engineering Toolkit in Backtrack 5

 

Open your backtrack  console & Type cd /pentest/exploits/set

 

Now type ./set 

 

Spear-Phishing Attack Vector: The spear-phishing attack menu is used for performing targeted email attacks against a victim. You can send multiple emails based on what your harvested or you can send it to individuals. You can also utilize fileformat (for example a PDF bug) and send the malicious attack to the victim in order to hopefully compromise the system.

Website Attack vector: The web attack vector is used by performing phishing attacks against the victim in hopes they click the link. There is a wide-variety of attacks that can occur once they click. We will dive into each one of the attacks later on.

 

Infectious Media Generator: The infectious USB/DVD creator will develop a Metasploit based payload for you and craft an autorun.inf file that once burned or placed on a USB will trigger an autorun feature and hopefully compromise the system. This attack vector is relatively simple in nature and relies on deploying the devices to the physical system.

 

Create a payload and Listner: The create payload and listener is an extremely simple wrapper around Metasploit to create a payload, export the exe for you and generate a listener. You would need to transfer the exe onto the victim machine and execute it in order for it to properly work.

Mass mailer Attack: The mass mailer attack will allow you to send multiple emails to victims and customize the messages. This option does not allow you to create payloads, so it is generally used to perform a mass phishing attack.

 

Teensy USB HID Attack vector: The teensy USB HID attack is a method used by purchasing a hardware based device from prjc.com and programming it in a manner that makes the small USB microcontroller to look and feel exactly like a keyboard.

 

SMS Spoofing Attack Vector: This module allows you to specially craft SMS messages and send them to a person. You can spoof the SMS source.

 

Wireless Access Point Attack Vector: it Can be used to set up a rouge wireless access point, Spoof DNS and redirect all traffic to attacker.

 

Third Party Modules: This attack vector consists of Third party module – RATTE (Remote Administration Tool Tommy Edition) which is a HTTP tunneling payload. This can be used in the same way as website attack vectors but with an added advantage of beating security mechanisms like local Firewall and IPS.

We Hope That You Learned Something Very Useful From This Tutorial...!!!

If You Have any Question or Problem Simply Just Comment Below