WebCruiser - Web Vulnerability Scanner Enterprise3.5.6

WebCruiser - Web Vulnerability Scanner Enterprise is a software application specialized in auditing websites and detecting all sorts of vulnerabilities.It offers support for website scanning capabilities and POC (proof of concept) for several web vulnerabilities, such as SQL Injection, Cross Site Scripting, Local File Inclusion, Remote File Inclusion, Redirect. The utility focuses especially on vulnerabilities which present high risk.

Interacting with the GUI

The tool comes packed with lots of configuration settings so be prepared to spend some extra time getting an idea about how to configure them. Although it is rich-featured, the GUI reveals a well-structured suite of features and sports a clean design.You can also appeal to an online help manual in case you need to find out detailed information about the program’s configuration settings.

Support for different scanning modes

WebCruiser - Web Vulnerability Scanner Enterprise gives you the possibility to choose between three scanning methods, namely current ULR, current page and all links associated with it, and whole site with the same domain.The results are revealed directly in the main window and it takes a single right-click on vulnerability in order to launch SQL Injections or Cross Site Scripting POC. The tool lets you work with GET/Post/Cookie Injection, SQL Server (Plaintext/FieldEcho(Union)/Blind Injection), MySQL/DB2/Access (FieldEcho(Union)/Blind Injection), and  Oracle (FieldEcho(Union)/Blind/CrossSite Injection).Other important configuration settings worth being mentioned enable you to capture ‘Post’ data automatically each time you post any information, conduct WAVSEP v1.5 SQL Injection & XSS test cases, employ a Resend & brute force tool, as well as make use of POC tool for XSS, LFI, RFI, and Redirect functions.

Final verdict

All things considered, WebCruiser - Web Vulnerability Scanner Enterprise comes packed with powerful and advanced features, and proves to be a reliable web penetration testing application. It provides support for some noteworthy options like crawler and vulnerability scanner (e.g. SQL Injection, Cross Site Scripting) for helping you identify vulnerabilities.