Lilith: Perl script to audit web applications
Lilith tool analyses webpages and looks for htmltags , which often refer to dynamic pages that might be subject to SQL injection or other flaws.Lilith basic function is to spider and analyses pages, following hyperlinks, injecting special characters that have a special meaning to any underlying platform. As most of us know web applications scanner can never perform a full 100% correct audit. A manual re-check eliminates most of the false positve.
Lilith tool analyses webpages and looks for htmltags , which often refer to dynamic pages that might be subject to SQL injection or other flaws.Lilith basic function is to spider and analyses pages, following hyperlinks, injecting special characters that have a special meaning to any underlying platform. As most of us know web applications scanner can never perform a full 100% correct audit. A manual re-check eliminates most of the false positve.
Features and changes made in lilith
- got rid of many many false positives (that's good)
- when SQL error is found, it now goes onto next var
- improved (i hope) scanning engine
- (anti) coldfusion support
- better cookie handling and cookie tampering
- omitted perl HTML::Form limitation
- better verbose output
- extensive logging
- detects directory indexing
- recursive URL dissection
- cleaned up this pasta code
