Website vulnerability scanning (Safe3 Web Vul Scanner)

Safe3 Web Vul Scanner is a website security detection tool launched by Umbrella Network. Traditional methods often rely on penetration testing (black box, white box and gray box testing), which is often limited to the technical level of the tester. The software needs to install [.net framework2.0 Simplified Chinese version] to run

cgi scanning rule description:
cgi.list is the rule file
Format: url<->matching rules<->post data, or url<->matching rules
There are three types of matching rules. The front represents the matching position, and the back can be a regular expression to represent the matching return content.
1.S:200|403 means http status contains 200 or 403
2.H:nginx|iis means the http header contains nginx or iis
3.B:mysql means the http body contains mysql characters

v9.9
1. Added cgi scanning function, fixed some bugs and enhanced stability

v9.5
1. Added error reporting mode function to scan SQL injection vulnerabilities more accurately

v9.1
1. Enhance POST request vulnerability scanning
2. Fix the bug of dic.txt dictionary guessing

v9.0
1. Added the function of extracting form parameters
2. Enhance directory browsing vulnerability scanning
3. Added custom scan dic.txt
4. Fix the bug that may crash when decompressing gzip