Skip to content

BWASP/CRX

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

89 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

BWASP

The BoB Web Application Security Project (BWASP) is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers.

The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack.

BWASP supports performing automated analysis and manual analysis.

The BWASP Project supports:

  • Find Attack vector automatically. (e.g. SQL Injection, Cross-site Scripting)
  • Detect website technology.
  • Log4J vulnerability scan (Partially supports java language)
  • HTTP REST API
  • GuideLine Result
  • Test payload option(attack test)

Getting started

pip3 install -r requirements.txt

python3 start.py

BWASP Tool Guide

(1) How to apply CRX

(2) How to set up automatic analysis function

(3) Utilization of automatic analysis function Dashboard

(4) Utilize automatic analysis function Attack Vectors

(5) Attack attempt through automatic analysis function

(6) Leverage manual analysis capabilities

Roadmap

  • Add OSINT feature (find subdomains)

Reference

Web Infra Environment Analysis: wappalyzer(https://github.com/AliasIO/wappalyzer)

Contact and News

Contributor

Acknowledgement

This work was supported by Korea Information Technology Research Institute (KITRI) Best of the Best (BoB) Program 10th vulnerability analysis track.

[Project Name: BoB Web Application Security Project]

Releases

No releases published

Packages

No packages published

Contributors 4

  •  
  •  
  •  
  •