Web Application Testing
Web Application Security Testing is a great way to quickly identify security weaknesses so that they can be prioritised and fixed before some evil-intentioned black hat hacker causes you costly security breach or service interruption.
These types of negative events can result in significant financial loss, a damaged reputation, fines and eroded customer loyality, not to mention lots of bad press for your company.
Website Scan
Identifying specific web server configuration issues. Plus finding common vulnerabilities which affect web applications: XSS, OS Command Injection, Directory Traversal, SQL Injection and others.
SQLi Scan
Identifying SQL injection vulnerabilities found in web applications by crawling and performing deep inspection of web pages and parameters.
XSS Scan
Powered by OWASP ZAP, scanning your web application to look if it is affected by Cross-Site-Scripting vulnerabilities.
WordPress Scan
Discovering security issues and vulnerabilities in your WordPress website using the most advanced WordPress scanner: WPScan.
Joomla Scan
Performing a Joomla security assessment by finding vulnerabilities in Joomla core, modules, templates and components.
SharePoint Scan
Discovering various security vulnerabilities and weaknesses in web applications built on top of Microsoft SharePoint and FrontPage.
URL Fuzz
Discovering hidden files and directories (which are not linked in the HTML pages): .zip; .bkp; .xls; .conf; .bak etc. Easy to take a look on your hidden content hosted on your web server.
Drupal Scan
Finding out Durpal version, themes, modules and their vulnerabilities. Also checking for common Durpal misconfigurations and weak server settings.
Don’t wait until it’s too late!
Information Gathering
Wikipedia defines: Information can be thought of as the resolution of uncertainty; it is that which answers the question of “what an entity is” and thus defines both its essence and nature of its characteristics. It is associated with data, as data represents values attributed to parameters, and information is data in context and with meaning attached.
DOMAINS
Discovering domains associated with your domain and to determine the attack surface of your organization. Finding the systems which are less protected and more vulnerable to attacks.
SUBDOMAINS
Discovering subdomains of your domain including to determine the attack surface of your organization. Finding the systems which are less protected and more vulnerable to attacks.
TECHNOLOGIES
Discovering the technologies used by a your web application, server-side and client-side. Also possible to get information about multiple virtual hosts on the same IP.
GOOGLEING
Gathering juicy information indexed by Google about your website (ex. login pages, sensitive files, error messages, directory listing, etc).
Contact Us
Send us your website URL and additional information (optional)
We will reply within 24h excluding weekends with further information