Websecurify is a powerful web application security testing environment designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies. This tool automatically identifies web application vulnerabilities by using advanced discovery and fuzzing technologies.
WebSecurify is available in major OS platforms – Windows, Mac and Linux. Its even available as a Chrome extension.
Post Updated:
- Target site that requires authentication
- Info on Chrome Plugin
Running the Scanner
Initiating a scan with Websecurify is simple and is achieved in 2-3 steps.
1. Select ‘Start new automated test’, Enter Workspace Name and the Target application URL.
2. If application requires login, select ‘login or initialize target’. This opens the browser and asks you to enter the credentials. Close the browser window after login. (This step is optional).
You should new be authenticated to the application. After post login pages are displayed, close websecurify browser window.
3. Click on ‘Ok’ to start the scan 
Once the Scan is Complete
Once the scan is complete, scan results are displayed, sorted based on the severity of the vulnerabilities discovered. Clicking on each of the category will further display the instances found and the technical details of analysis.
Scan results can be rendered in a report format by clicking on the Report Tab and can be exported in CSV, HTM, XML and JSON formats.
Comments/Observations
- A scan was initiated for an average sized application during evaluation of websecurify and following were identified
- Memory consumption was increasing with time but its far better than many other free/commercial scanners
- Progress of scan was normal till it reached almost 97% (in around 2 hrs), then it stayed in 97-98 and back to 97 for a loooong time. So I had it running and checked it the next day.
- This tool doesn’t provide the statistics of the scan, like pages crawled, time consumed, etc.
- This tool has the simplest interface of all the other tools available in the market.
Chrome Extension
WebSecurify has a chrome extension too. Once installed, we can initiate the scan from within Chrome.
Test Report can be displayed on a new page once the scan is complete.
https://chrome.google.com/webstore/detail/emclbdbpcnhmopfkidjhlinikkohlkpn#
| Websecurify Info | |
|---|---|
| App Name | Websecurify |
| License | free |
| Type | |
| App URL |
 |
| More Info | link |
