【安全牛学习笔记】skipfish

skipfish                                               C语言编写                                              实验性的主动web安全评估工具                            递归爬网                                               基于字典的探测                                         速度较快                                                   多路单线程，全异步网络I/O，消除内存管理和调度开销     启东式自动内容识别                                 误报较低

skipfish                                                      skipfish -o test http://1.1.1.1                                skipfish -o test  @url.txt                                     shipfish -o test -S complet.wl -W a.wl http://1.1.1.1   #字典 -I :只检查包含'string'的URL                                    -X :不检查包含'string'的URL      #logout                       -k :不对指定参数进行Fuzz测试                                   -D :跨站点爬另外一个域                                        -l :每秒最大请求数                                            -m :每IP最大并发连接数                                        --config : 指定配置文件

root@kali:~# skipfish -o test1 http://192.168.1.101/dvwa/

Welcome to skipfish. Here are some useful tips:

1) To abort the scan at any time, press Ctrl-C. A partial report will be written