Safe3 Web Vulnerability Scanning System

Safe3 Web vulnerability scanning system is a website security detection tool launched by Umbrella Network. Safe3 Web vulnerability scanning system uses crawler technology and SQL injection status detection technology, and the effect is very good. Safe3 Web Vul Scanner and SQL injection status detection technology make it more intelligent, faster and more accurate than similar products at home and abroad.

Safe3 Web vulnerability scanning system software features

1. Fully supports Basic, Digest, NTLM http authentication.

2. Intelligent web spider automatically deletes duplicate web pages, which is one of the reasons why it is so fast.

3. Even if a WAF or HIPS protects the website, SQL injection stateful scanning technology can find vulnerabilities.

4. Automatic JavaScript analyzer allows extraction of URLs from Ajax, Web 2.0 and any other applications.

5. The Chinese version of the Safe3 Web vulnerability scanning system supports scanning SQL injection, XSS, upload vulnerabilities, management paths, potential vulnerabilities, directory listing vulnerabilities and any other vulnerabilities such as svn information leakage.

Safe3 Web Vulnerability Scanning System Software Advantages

1.SQL injection web scraping

The web crawling module uses breadth-first crawler technology and website directory restoration technology. The breadth-first crawler technology will not cause crawler trap problems. The crawling depth and crawling thread can be customized. The website directory restoration technology removes irrelevant results and improves crawling efficiency. And the injection page with repeated parameters has been removed, which greatly improves the efficiency and observability.

2.SQL injection status scanning technology

Different from the traditional way of judging whether there is an injection vulnerability based on error feedback, state detection is used to judge. The so-called status detection means: input different parameters for a certain link, and use the vector comparison algorithm to compare and judge the feedback results from the website to determine whether the link is an injection point. This method does not depend on specific database types and settings. As well as the type of CGI language, the injection point detection is comprehensive and there will be no false negatives. It also has a certain function of bypassing IDS detection and scanning to hidden injection points.

Safe3 Web Vulnerability Scanning System Matching Rules

cgi.list is the rule file

Format: url<->matching rules<->post data, or url<->matching rules

There are three types of matching rules. The front represents the matching position, and the back can be a regular expression to represent the matching return content.

1.S:200|403 means http status contains 200 or 403

2.H:nginx|iis means the http header contains nginx or iis

3.B:mysql means the http body contains mysql characters

Safe3 Web vulnerability scanning system system applicable fields

An essential detection tool for domestic finance, securities, banking, e-government, e-commerce, education, online games, comprehensive industry portals, IDC and other websites.

Safe3 Web vulnerability scanning system installation steps

1. Download the Safe3 Web vulnerability scanning system software package from the Huajun download site and use the decompression tool to decompress it.

2. Find the application in the files

3. Double-click the program to enter. The software is green and requires no installation.

How to use Safe3 Web vulnerability scanning system

1. Open the Safe3 Web vulnerability scanning system and enter the URL to be scanned.

2. Select the corresponding scanning mode

3. Click Scan. After the scan is successful, you can click to export the data.

Safe3 Web Vulnerability Scanning System Software Comparison

　　Tinder Internet Security Software

Rong Internet Security Software is a lightweight, efficient and free computer defense and anti-virus security software. It can significantly enhance the computer system's defense capabilities when dealing with security issues. It can comprehensively intercept and kill various types of viruses. The software is small in size and has low system memory usage. It is extremely low, ensuring that there will be absolutely no lag during the active defense and killing process, which makes up for the lag of existing anti-virus software that can only kill known viruses and Trojans. Friends in need should download it quickly!

　　Jinshan Guardian

Kingsoft Guard is currently the free security software with the strongest ability to detect and kill Trojans, the fastest vulnerability detection, and the smallest size. Kingsoft Guard adopts Kingsoft's leading cloud security technology, which can not only kill hundreds of millions of known Trojans, but also discover new Trojans within 5 minutes; vulnerability detection is optimized for Windows 7 and is 10 times faster than similar software; it also has real-time protection and plug-in cleaning , repair IE and other functions, Kingsoft Guard comprehensively protects your system security.

Compared with the Safe3 Web vulnerability scanning system, both softwares have their own characteristics, but both can effectively protect the computer network and detect vulnerabilities. If you need it, please click to download it!

Safe3 Web vulnerability scanning system update log:

1. Optimize content

2. The details are more outstanding and bugs are gone.