OK, so another Web application scanner is called McDo.
So this one actually scans Web servers for known vulnerabilities that you could potentially exploit.
I, I personally find Nitto very useful.
I use it on all penetration tests that I do, and you can really find very, very, very valuable vulnerabilities
for you to test on and try to take advantage of.
So and it's very, very easy to use.
So let's go over to NATO and see how it works.
OK, so we're back in Colonics Machine, so all you really have to do is type in NICTA so and OK, go
and then put a dash host and then you're going to put HTP calling for us as far as large.
192000 one six eight five six one zero four.
Will you size Divi A just to keep it isolated there.
And let's go ahead and try it out.
So you're going to want to enter and it's going to start to look for, you know, any and all information
that they can get.
And they're going to start to find different vulnerabilities, as you can see, is listing a lot of
things out, like right here as PSP, you know, reveals sensitive, sensitive information, found some
different directories that we might be able to browse to.
So it's going through and looking looking for a lot of different vulnerabilities.
So just give it let's just give it a second and let's see, you know what?
All the different.
OK, so finished up.
So some just found a couple more interesting things, like, for example, it found the login page.
So right here it says, hey, admin login page is found.
So that's something that you definitely want to find out in the real world.
If you can find an admin login page, you might be able to take advantage of it.
You might be able to brute force into it.
Who knows?
So it's definitely something that you want to be able to figure out.
So this one right here says that, you know, you may be able to do command execution, you know, based
on what is found, has to do with some stuff.
So the C.
S fuel injection might also be an issue.
So you can check out the changelog right here and get more information on, you know, what's going
on here.
So very, very useful tool.
And you'll find that it finds different vulnerabilities that you might be able to throw like into searchingly
or into exploit.
DB look for it or you can just fire at this point and be able to take advantage of it.
So Nick, though, is definitely a very useful tool and I would definitely recommend that you guys use
it.
OK, so another tool to scan Web application websites is called Ask you a map and ask you on edge.
These are two different tools.
So a majority of Web applications are going to utilize some type of escudo database, you know, in
some type of way.
And regardless of the language, you know, we can enumerate information about them and determine if
all attacks are possible with you.
A map and ask a ninja.
So just like Bourbon's, you know, these two tools perform similar functions, and you this comes down
to personal preference, I'm personally going to use escudo map and that's what I'm going to show you.
And I can show you what's going on in here, because a little bit a little bit funkier, it's going
to get going.
So we're going to ask you a map and we're going to use that in our Web applications.
So we're going to wait so that it up.