Blog

RapidScan – The Multi-Tool Web Vulnerability Scanner

RapidScan – The Multi-Tool Web Vulnerability Scanner

RapidScan – The Multi-Tool Web Vulnerability Scanner

Evolution:

It is quite a fuss for a pentester to perform binge-tool-scanning (running security scanning tools one after the other) sans automation. Unless you are a pro at automating stuff, it is a herculean task to perform a binge scan for each and every engagement. The ultimate goal of this program is to solve this problem through automation; viz. running multiple scanning tools to discover vulnerabilities, effectively judge false positives, collectively correlate results, and save precious time; all these under one roof.

RapidScan - The Multi-Tool

Features

  • one-step installation.
  • executes a multitude of security scanning tools, does other custom-coded checks, and prints the results spontaneously.
  • some of the tools include Nmap, DNS recon, wafw00f, uniscan, sslyze, fierce, lbd, theharvester, dnswalk, golismeroetc executes under one entity.
  • saves a lot of time, indeed a lot of time!.
  • checks for the same vulnerabilities with multiple tools to help you zero in on false positives effectively.
  • legends to help you understand which tests may take a longer time, so you can Ctrl+C to skip if needed.
  • association with OWASP Top 10 2017 on the list of vulnerabilities discovered. (under development)
  • critical, high, medium, low, and informational classification of vulnerabilities.
  • vulnerability definitions guide you on what the vulnerability actually is and the threat it can pose. (under development)
  • remediations tell you how to plug/fix the found vulnerability. (under development)
  • the executive summary gives you an overall context of the scan performed with critical, high, low, and informational issues discovered. (under development)
  • artificial intelligence to deploy tools automatically depending upon the issues found. for eg; automates the launch of wpscan and plecost tools when a wordpress installation is found. (under development)
  • detailed comprehensive report in a portable document format (*.pdf) with complete details of the scans and tools used. (under development)

FYI:

  • program is still under development, works, and currently supports 80 vulnerability tests.
  • parallel processing is not yet implemented, may be coded as more tests get introduced.

Vulnerability Checks

  • DNS/HTTP Load Balancers & Web Application Firewalls.
  • Checks for Joomla, WordPress, and Drupal
  • SSL-related Vulnerabilities (HEARTBLEED, FREAK, POODLE, CCS Injection, LOGJAM, OCSP Stapling).
  • Commonly Opened Ports.
  • DNS Zone Transfers using multiple tools (Fierce, DNSWalk, DNSRecon, DNSEnum).
  • Sub-Domains Brute Forcing.
  • Open Directory/File Brute Forcing.
  • Shallow XSS, SQLi, and BSQLi Banners.
  • Slow-Loris DoS Attack, LFI (Local File Inclusion), RFI (Remote File Inclusion) & RCE (Remote Code Execution).
  • & more coming up…

Requirements

  • Python 2.7
  • Kali OS (Preferred, as it is shipped with almost all the tools)
  • For other OS flavors, working on docker support. Hang on.

Usage
Download the script and give executable permissions

You can also buy instant:

GET ANYTHING FROM G2A FOR FREE

Cashapp Money Transfer Click here

Paypal Money Transfer Click here

Western Union  Money Transfer Click here

Venmo Money Transfer Click here

Bank Money Transfer Click here to Contact Us

Leave a Reply