Web-fu - The Ultimate Web Hacking Chrome Extension

Web-fu Is a web hacking tool focused on discovering and exploiting web vulnerabilitites.

 BROWSER INTEGRATION 

This tool has many advantages, as a browser-embedded webhacking tool, is very useful for scanning browser-authenticated applications, if browser can authenticate and access to the web application, the tool also can. Note that some other tools do not support neither certificate authentication nor web vpn accesses.
The integration with chrome, provides a more comfortable and agile way of web-hacking, and you have all the application data loaded on the hacking tool, you don't need to copy the url, cookies, etc. to the tool, just right click and hack.
The browser rendering engine is also used in this tool, to draw the html of the responses.


 FALSES POSITIVES 

When I coded this tool, I was obsessed with false positives, which is the main problem in all detection tools.  I have implemented a gauss algorithm, to reduce the faslse positives automatically which works very very well, and save a lot of time to the pentester.


 VIDEO 

 Here is a video, with some of the web-fu functionalitites:

 VISUAL FEATURES 

This tool has a visual crawler. Normal crawlers doesn't parse the ajvascript, this tool does. The visual crawler loads each link of the web site, rendering the html and executing all the javascript as a normal load, then the links are processed from he DOM and clicked.
A visual form cracker, is also available, althow is experimental and only works on some kind of forms.


 SCANNING FEATURES

The web-fu's portscanner, has a database of a common web ports, like 80,81,8080 and so on.
The cracker module, can bruteforce web directories to find new attack vectors, and can fuzz get and post parameters for discovering vulns, and also crack passwords. There are 9 preloaded wordlists, and you can also load a custom wordlist. Prefilters, falsepositive reductor and render will be helpful. The scanners support SSL, if the website can be loaded in the chrome, can be scanned by web-fu.


ENCODERS & DECODERS

The supported encoders and decoders are: base64, urlescape and urlencode


OTHER FEATURES

A web notepad is available, saving the information on the browser localStorage, there is one notepad per site. A cookie editor is also very useful for pentesting. The inteceptor, is like a web proxy but from the inside of the browser, you can intercept a request There is also a session locker and a exploit web search.


CHROME STORE 
Here is the link to the chrome store, the prize is about one euro, very cheap if you compare with other scanners: Web-Fu on Chrome Store


 With webfu, you will do the best web site pentest and vulnerability assessment.

Related articles

1. Beginner Hacker Tools
2. Hack Tools Github
3. Kik Hack Tools
4. What Is Hacking Tools
5. Hacking Tools
6. Hacking Tools Mac
7. Hacking Tools
8. Pentest Recon Tools
9. Hack App
10. Hacker Tools Mac
11. Growth Hacker Tools
12. Hack And Tools
13. Pentest Tools Website Vulnerability
14. Pentest Box Tools Download
15. Hacker Tools 2020
16. Pentest Tools Linux
17. Hack Tools For Pc
18. Hack Tools For Mac
19. Pentest Tools
20. Hacking Tools And Software
21. Pentest Tools For Android
22. Pentest Tools Tcp Port Scanner
23. Hack Tools For Ubuntu
24. Hacking Tools For Windows
25. Hacker Security Tools
26. Pentest Tools Review
27. Install Pentest Tools Ubuntu
28. Hacking Tools Online
29. Hacking Tools 2020
30. Nsa Hack Tools Download
31. Hacker Hardware Tools
32. Pentest Tools For Mac
33. Pentest Automation Tools
34. Hacking Tools For Windows Free Download
35. Pentest Tools Framework
36. Physical Pentest Tools
37. Pentest Tools Download
38. Hacking Tools Github
39. Pentest Tools Apk
40. Hacking Apps
41. How To Make Hacking Tools
42. Tools Used For Hacking
43. Growth Hacker Tools
44. Hacking Tools Mac
45. Pentest Tools Open Source
46. Physical Pentest Tools
47. Top Pentest Tools
48. Hacker Tools Free
49. New Hacker Tools
50. Pentest Tools Linux
51. Physical Pentest Tools
52. Hack Tools For Windows
53. Pentest Tools Tcp Port Scanner
54. Hacking Tools For Games
55. Beginner Hacker Tools
56. Hack Tools For Pc
57. Kik Hack Tools
58. Kik Hack Tools
59. Termux Hacking Tools 2019
60. Pentest Tools Framework
61. Kik Hack Tools
62. Beginner Hacker Tools
63. Hack Apps
64. Nsa Hack Tools
65. Pentest Tools Windows
66. Pentest Tools Subdomain
67. Hack Tools For Ubuntu
68. Hacking Tools Free Download
69. Pentest Tools Kali Linux
70. Tools Used For Hacking
71. Hack Tools Github
72. New Hack Tools
73. Bluetooth Hacking Tools Kali
74. Bluetooth Hacking Tools Kali
75. Pentest Tools Review
76. Top Pentest Tools
77. Pentest Tools
78. Hacking Apps
79. Hacker Tools
80. Hacking Tools And Software
81. Pentest Tools Url Fuzzer
82. Pentest Tools For Mac
83. How To Make Hacking Tools
84. Hacking Tools Free Download
85. Hack Tool Apk
86. Hack App
87. Pentest Tools For Ubuntu
88. Hacking Tools For Kali Linux
89. Pentest Tools For Mac
90. Hacker Techniques Tools And Incident Handling
91. Hacker Tools For Windows
92. Hacker Tools 2020
93. Computer Hacker
94. Hack Tools
95. Pentest Tools Tcp Port Scanner
96. Pentest Tools For Mac
97. Hacker Tools Free Download
98. Pentest Tools Free
99. Android Hack Tools Github
100. Hacker Tools Online
101. Hacking Tools For Pc
102. Hack Tool Apk
103. Tools For Hacker
104. Top Pentest Tools
105. How To Install Pentest Tools In Ubuntu
106. Hacking Tools Free Download
107. Hack Tools For Windows
108. Pentest Box Tools Download
109. Hacker Tools Linux
110. Hacker Tools Mac
111. Hack Tool Apk No Root
112. Hacking Tools Windows
113. Pentest Tools Apk
114. Underground Hacker Sites
115. Hack Tool Apk
116. Wifi Hacker Tools For Windows