Locked Lilith: Perl script to audit web applications

[sQuo]

Lilith: Perl script to audit web applications

 

Lilith tool analyses webpages and looks for htmltags , which often refer to dynamic pages that might be subject to SQL injection or other flaws.Lilith basic function is to spider and analyses pages, following hyperlinks, injecting special characters that have a special meaning to any underlying platform. As most of us know web applications scanner can never perform a full 100% correct audit. A manual re-check eliminates most of the false positve.

 

Features and changes made in lilith

 

got rid of many many false positives (that’s good)

when SQL error is found, it now goes onto next var

improved (i hope) scanning engine

(anti) coldfusion support

better cookie handling and cookie tampering

omitted perl HTML::Form limitation

better verbose output

extensive logging

detects directory indexing

recursive URL dissection

cleaned up this pasta code

 

Download Lilith

This is the hidden content, please

• Sign In
• or
• Sign Up