{"id":4808,"date":"2017-10-18T02:27:58","date_gmt":"2017-10-17T18:27:58","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4808"},"modified":"2017-10-18T02:28:20","modified_gmt":"2017-10-17T18:28:20","slug":"spaghetti-download-web-application-security-scanner","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2017\/10\/spaghetti-download-web-application-security-scanner\/","title":{"rendered":"Spaghetti Download &#8211; Web Application Security Scanner"},"content":{"rendered":"<p>Spaghetti is an Open-source Web Application Security Scanner, it is designed to find various default and insecure files, configurations, and misconfigurations.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/Spaghetti-Download-Web-Application-Security-Scanner-640x392.png\" alt=\"Spaghetti Download - Web Application Security Scanner\" width=\"640\" height=\"392\" class=\"aligncenter size-medium wp-image-4841\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/Spaghetti-Download-Web-Application-Security-Scanner-640x392.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/Spaghetti-Download-Web-Application-Security-Scanner-1024x628.png 1024w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/Spaghetti-Download-Web-Application-Security-Scanner.png 1070w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>It is built on Python 2.7 and can run on any platform which has a Python environment.<\/p>\n<h2>Features of Spaghetti Web Application Security Scanner<\/h2>\n<ul>\n<li><strong>Fingerprints<\/strong>\n<ul>\n<li>Server<\/li>\n<li>Web Frameworks (CakePHP, CherryPy,&#8230;)<\/li>\n<li>Web Application Firewall (Waf)<\/li>\n<li>Content Management System (CMS)<\/li>\n<li>Operating System (Linux, Unix,..)<\/li>\n<li>Language (PHP, Ruby,&#8230;)<\/li>\n<li>Cookie Security<\/li>\n<\/ul>\n<\/li>\n<li><strong>Bruteforce<\/strong>\n<ul>\n<li>Admin Interface<\/li>\n<li>Common Backdoors<\/li>\n<li>Common Backup Directory<\/li>\n<li>Common Backup File<\/li>\n<li>Common Directory<\/li>\n<li>Common File<\/li>\n<li>Log File<\/li>\n<\/ul>\n<\/li>\n<li><strong>Disclosure<\/strong>\n<ul>\n<li>Emails<\/li>\n<li>Private IP<\/li>\n<li>Credit Cards<\/li>\n<\/ul>\n<\/li>\n<li><strong>Attacks<\/strong>\n<ul>\n<li>HTML Injection<\/li>\n<li>SQL Injection<\/li>\n<li>LDAP Injection<\/li>\n<li>XPath Injection<\/li>\n<li>Cross Site Scripting (XSS)<\/li>\n<li>Remote File Inclusion (RFI)<\/li>\n<li>PHP Code Injection<\/li>\n<\/ul>\n<\/li>\n<li><strong>Other<\/strong>\n<ul>\n<li>HTTP Allow Methods<\/li>\n<li>HTML Object<\/li>\n<li>Multiple Index<\/li>\n<li>Robots Paths<\/li>\n<li>Web Dav<\/li>\n<li>Cross Site Tracing (XST)<\/li>\n<li>PHPINFO<\/li>\n<li>.Listing<\/li>\n<\/ul>\n<\/li>\n<li><strong>Vulns<\/strong>\n<ul>\n<li>ShellShock<\/li>\n<li>Anonymous Cipher (CVE-2007-1858)<\/li>\n<li>Crime (SPDY) (CVE-2012-4929)<\/li>\n<li>Struts-Shock<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>Using Spaghetti Web Application Security Scanner<\/h2>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<pre>root@darknet:~\/Spaghetti# python spaghetti.py\r\n  _____             _       _   _   _\r\n |   __|___ ___ ___| |_ ___| |_| |_|_|\r\n |__   | . | .'| . |   | -_|  _|  _| |\r\n |_____|  _|__,|_  |_|_|___|_| |_| |_|\r\n       |_|     |___|          v0.1.3\r\n\r\n~\/# Spaghetti - Web Application Security Scanner\r\n~\/# Codename - MR.R0B0T\r\n~\/# Momo Outaadi (@M4ll0k)\r\n~\/# https:\/\/github.com\/m4ll0k\/Spaghetti\r\n\r\nUsage:\r\n\r\n        -u --url        Target URL (eg: http:\/\/example.com)\r\n        -s --scan       Scan Options (default=0):\r\n\r\n                0:      Full Scan\r\n                1:      Bruteforce (dirs,files,..)\r\n                2:      Disclosure (ip,emails,..)\r\n                3:      Attacks (sql,lfi,..)\r\n                4:      Others (webdav,..)\r\n                5:      Vulns (shellshock,..)\r\n                6:      Fingerprint only\r\n\r\n        --crawler       Deep crawling (slow)\r\n        --agent         Use the specified user-agent\r\n        --random-agent  Use a random user-agent\r\n        --redirect      Redirect target URL, default=True\r\n        --timeout       Set timeout, default=None\r\n        --cookie        Set cookie, default=None\r\n        --proxy         Set proxy, (host:port)\r\n        --verbose       Verbose output\r\n        --version       Show version\r\n        --help          Show this help and exit\r\n\r\nExamples:\r\n\r\n        spaghetti.py --url http:\/\/example.com\r\n        spaghetti.py --url http:\/\/example.com --scan [0-6]\r\n        spaghetti.py --url http:\/\/example.com --scan 1 --crawler\r\n<\/pre>\n<p>Example:<\/p>\n<pre>python spaghetti.py --url site.com --scan 0 --random-agent --verbose<\/pre>\n<h3>Installation of Spaghetti Web Scanner<\/h3>\n<pre>$ git clone https:\/\/github.com\/m4ll0k\/Spaghetti.git\r\n$ cd Spaghetti \r\n$ pip install -r requirements.txt\r\n$ python spaghetti.py<\/pre>\n<p>There are also other options to check out like:<\/p>\n<p>&#8211; <a href=\"https:\/\/www.darknet.org.uk\/2011\/02\/arachni-v0-2-2-1-web-application-security-scanner-framework\/\">Arachni v0.2.2.1 &#8211; Web Application Security Scanner Framework<\/a><br \/>\n&#8211; <a href=\"https:\/\/www.darknet.org.uk\/2011\/07\/vega-open-source-cross-platform-web-application-security-assessment-platform\/\">Vega \u2013 Open Source Cross Platform Web-Application Security Assessment Platform<\/a><\/p>\n<p>You can download Spaghetti Web Application Security Scanner here:<\/p>\n<p><a href=\"https:\/\/github.com\/m4ll0k\/Spaghetti\/archive\/v0.1.2.zip\">Spaghetti-v0.1.2.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/m4ll0k\/Spaghetti\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Spaghetti is an Open-source Web Application Security Scanner, it is designed to find various default and insecure files, configurations, and misconfigurations. It is built on Python 2.7 and can run on any platform which has a Python environment. Features of Spaghetti Web Application Security Scanner Fingerprints Server Web Frameworks (CakePHP, CherryPy,&#8230;) Web Application Firewall (Waf) [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"Spaghetti is an Open-source Web Application Security Scanner, it is designed to find various default and insecure files, configurations etc.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9],"tags":[284],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4808"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4808"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4808\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}