Web scanning

[rahul bhola <rb1223334444 () gmail com>]

Hi,
   I this is Rahul. I work on web-app security auditing projects and have
almost been using nmap as standalone as well as with msf for almost 5 years
now. Also i did an intern at indian cyber security division for auditing
there applications. Now when  I was looking on some scripts on your
webpage  the webscanning part caught my eye. I had some questions regarding
that.
   Is the web app auditing part implemented as a separate auditing tool
like metasploit or sqlmap or is it to be implemented using --script. Also
which language you wish to use it for is it lua or could it be python.
Asking cause i have some of my py scripts that i use in web auditing that
might be helpful.
  Also a suggestion i find burpsuite very helpful because of the part where
i can use it as proxy to edit http headers. This alone could be a very
powerful feature while writing script.


Cheers
Rahul
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/