djgrasss / yawast

Yet Another Web Application Security Tool

##Yawast

Yet Another Web Application Security Tool

This application is still very much in the early development phase; as such it should be viewed as alpha software, and thus may have bugs, perform unexpectedly, or be missing features you'd expect from a tool like this. Please keep this in mind as you use this.

####Why?

Because.

This is meant to provide a easy way to perform initial analysis and information discovery. It's not a full testing suite, and it certainly isn't Metasploit. The idea is to provide a quick way to perform initial data collection, which can then be used to better target further tests.

####Tests

The following tests are performed:

• (Generic) Info Disclosure: X-Powered-By header present
• (Generic) Info Disclosure: X-Pingback header present
• (Generic) Info Disclosure: X-Backend-Server header present
• (Generic) Info Disclosure: X-Runtime header present
• (Generic) Info Disclosure: Via header present
• (Generic) X-Frame-Options header not present
• (Generic) X-XSS-Protection disabled header present
• (Generic) SSL: HSTS not enabled
• (Generic) Source Control: Common source control directories present
• (Generic) Presence of crossdomain.xml or clientaccesspolicy.xml
• (Generic) Presence of WS_FTP.LOG
• (Apache) Info Disclosure: Module listing enabled
• (Apache) Info Disclosure: Server version
• (Apache) Info Disclosure: OpenSSL module version
• (Apache) Presence of /server-status
• (Apache) Presence of /server-info
• (IIS) Info Disclosure: Server version
• (ASP.NET) Info Disclosure: ASP.NET version
• (ASP.NET) Info Disclosure: ASP.NET MVC version
• (ASP.NET) Presence of Trace.axd
• (ASP.NET) Presence of Elmah.axd
• (nginx) Info Disclosure: Server version
• (PHP) Info Disclosure: PHP version

CMS Detection:

• Generic (Generator meta tag) [Real detection coming as soon as I get around to it...]

SSL Information:

• Certificate details
• Certificate chain
• Supported ciphers

In addition to these tests, certain basic information is also displayed, such as IPs (and the PTR record for each IP), HTTP HEAD request, and others.

####Usage

• Standard scan: ./yawast scan <url>
• HEAD-only scan: ./yawast head <url>
• SSL information: ./yawast ssl <url>
• CMS detection: ./yawast cms <url>

For detailed information, just call ./yawast -h to see the help page. To see information for a specific command, call ./yawast -h <command> for full details.

####Status

Various automated status messages and tools:

####License

Copyright (c) 2013, Adam Caudill ([email protected])

All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.