Analyzing web application security with Bash

This section will examine common command-line tools that you should have in your toolbox for web application security testing.

ProjectDiscovery

ProjectDiscovery maintains a variety of command-line tools you can run in your Bash shell. They’re designed to accept input and pass output via the shell pipeline, allowing you to chain together multiple tools. Their most popular tools include the following:

• nuclei: An open source vulnerability scanner that uses YAML templates
• nuclei-templates: Templates for the nuclei engine to find security vulnerabilities
• subfinder: A passive subdomain enumeration tool
• httpx: An HTTP toolkit that allows running sending probes to identify HTTP services
• cvemap: A CLI to search for CVE
• katana: A web crawling and spidering framework
• naabu: A port scanner that integrates easily with other ProjectDiscovery tools
• mapcidr: A utility program to perform multiple operations...