mailing list archives
From: rahul bhola <rb1223334444 () gmail com>
Date: Fri, 21 Mar 2014 09:19:46 +0530
I this is Rahul. I work on web-app security auditing projects and have
almost been using nmap as standalone as well as with msf for almost 5 years
now. Also i did an intern at indian cyber security division for auditing
there applications. Now when I was looking on some scripts on your
webpage the webscanning part caught my eye. I had some questions regarding
Is the web app auditing part implemented as a separate auditing tool
like metasploit or sqlmap or is it to be implemented using --script. Also
which language you wish to use it for is it lua or could it be python.
Asking cause i have some of my py scripts that i use in web auditing that
might be helpful.
Also a suggestion i find burpsuite very helpful because of the part where
i can use it as proxy to edit http headers. This alone could be a very
powerful feature while writing script.
Sent through the dev mailing list
Archived at http://seclists.org/nmap-dev/
- Web scanning rahul bhola (Mar 21)