WARCannon simplifies web-wide vulnerability research

guest · Aug 4, 2021

WARCannon simplifies web-wide vulnerability research
‘Even the most resource-constrained researcher can now add web-scale analysis to their arsenal’
August 4, 2021
https://portswigger.net/daily-swig/...on-simplifies-web-wide-vulnerability-research

An open source tool that makes grepping the internet for web vulnerabilities simpler, faster, and cheaper was unveiled at Black Hat USA today.

Security researchers and bug bounty hunters who unearth novel flaws in web applications, web frameworks, or open source components can use WARCannon to non-invasively test regex patterns across the entire internet for corresponding vulnerability indicators.
But this entails the parsing of a daunting volume of data – in the region of hundreds of terabytes.
Click to expand...

Fed by Common Crawl spiders’ trove of JavaScript, CSS, and other website code, WARCannon tackles this challenge with parallel WARC processing across hundreds of CPU cores, while costs are reduced courtesy of spot fleets and same-region data transfer.

As a result, “WARCannon can process multiple regular expression patterns across 400TB in a few hours for around $100”, according to the tool’s GitHub repo.
Click to expand...

“Digging through a framework, integration, technology, or component to find a vulnerability is really labor intensive,” he told The Daily Swig ahead of his Black Hat Arsenal presentation.

Woodward suggests that bug bounty hunters could extract the greatest benefit.

“Consider a researcher who spends two days finding a vulnerability in one place,” he explains. “They can then plug their findings into WARCannon and turn one vulnerability into five, 500, or 50,000.”
Click to expand...

Log in or Sign up

WARCannon simplifies web-wide vulnerability research

guest Guest

Log in or Sign up

WARCannon simplifies web-wide vulnerability research

guest Guest

Useful Searches