WebReaver

WebReaver is an elegant, easy to use and fully-automated, web application security security testing tool for Mac OS X. It is suitable for novice as well as advanced users. WebReaver allows you easily test any web application for a large variety of security issues.

WebReaver is powered by Websecurifys latest security testing engine, which comes with over 70 generic vulnerability checks ranging form SQL Injection, Expression Injection and Cross-site Scripting to Session Management issues, Information Disclosure and many others.

This tool detects numerous critical vulnerabilities including but not limited to:

• Shellshock (CVE-2014-6271, CVE-2014-7169)
• Expression Language Injection
• SQL Injection
• Cross-site Scripting
• Local And Remote File Includes
• XML Injection
• Command Injection
• CRLF Injection
• Weak Session Management
• Insecure Cross-domain Policies
• Open Redirect
• Response Splitting
• Session Security Best-practices
• Insecure SOAP Services
• Path, Username and Source Code Disclosure
• Insecure File Upload
• Vulnerable WordPress themes and plugins
• Many more

Check out https://www.websecurify.com/overview/vulnerabilities.html for more information on the types of vulnerabilities WebReaver can help you discover.

---

WebReaver saves you time and money by automating a tiresome and very technical process used by experts to find scary security vulnerabilities.