The Uniscan is a Web vulnerability scanner, aimed at information security, which aims at finding vulnerabilities in Web systems and is licensed under the GNU GENERAL PUBLIC LICENSE 3.0 (GPL 3).
Uniscan characteristics:
- Identification of system pages through a Web Crawler.
- Use of threads in the crawler.
- Control the maximum number of requests the crawler.
- Control of variation of system pages identified by Web Crawler.
- Control of file extensions that are ignored.
- Test of pages found via the GET method.
- Test the forms found via the POST method.
- Support for SSL requests (HTTPS).
- Proxy support.
- Generate site list using Google.
- Generate site list using Bing.
- Plug-in support for Crawler.
- Plug-in support for dynamic tests.
- Plug-in support for static tests.
- Plug-in support for stress tests.
- Crawler improved (a lot bug fix).
- Google seach back to Uniscan.
- Added Web server information module.
- Added Server information module.
- Added simple Web client (index.php).
- Added New Plugin “FCKeditor” for crawler.
- Added New Plugin “FCKeditor” for dynamic tests.
- Added New Plugin “PHP CGI Argument Injection” for dynamic tests.
- Added Auto-update.
- Added simple HTML report.
- Added detection of redirection.
- Added Simple TK GUI.
- Improved plug-in Webshell finder (less false-positive)
- Improved uniscan.pl, now uniscan.pl try detect if a host is responding before doing the scanning.
- Find for Drupal, Joomla and WordPress plugins when banner-grabbing detect on of this CMS.
The uniscan must be run from the command line.
Example: perl uniscan.pl -u http://www.example.com/ -d
Other options:OPTIONS:
-h help
-u <url> example: https://www.example.com/
-f <file> list of url's
-b Uniscan go to background
-q Enable Directory checks
-w Enable File checks
-e Enable robots.txt check
-d Enable Dynamic checks
-s Enable Static checks
-r Enable Stress checks
-i <dork> Bing search
-o <dork> Google search
Download - http://sourceforge.net/projects/uniscan/files/6.0/uniscan6.0.tar.gz/download
Download - http://sourceforge.net/projects/uniscan/files/6.0/uniscan6.0.tar.gz/download
More Documentation on uniscan - http://uniscan.sourceforge.net/?page_id=11
Website - http://uniscan.sourceforge.net/
No comments:
Post a Comment