Vooki: Dynamic Web Application & REST API Vulnerability Scanner (DAST Tool)

• Separate user interface for API.
• Add project/API end-points and test it.
• 10000+ vulnerabilities detection.
• Environment variables.
• Import/Export project.
• Import/Export environment variable.
• Imports collection and environment variables from Postman.
• Vulnerability dashboard.
• Compliance report.
• Run pipeline scan from command line.
• Vulnerability report generation.
• Reports with all relevant remediation.
• Supported on Windows,MacOS and Linux.

A Full Scan by Vooki meticulously examines all URLs collated from the browser, encompassing advanced features like web-spidering and CSRF token bypass for thorough analysis. The process involves a comprehensive review of all pages within the target web application. Moreover, it adeptly navigates through intricate login mechanisms, scanning pages situated behind authorization protocols to identify potential vulnerabilities. Engaging in a Full Scan provides a robust shield against security breaches by pinpointing and mitigating risk areas within your website. For a website fortified against unforeseen security threats, we highly recommend utilizing Vooki’s Full Scan feature for an in-depth, reliable vulnerability assessment.

Ideal for websites without authentication requirements and for static sites, Vooki's Basic Scan provides a reliable security assessment solution. This fundamental scan comes equipped with a default crawler, initiating its process by crawling through the site, aggregating URLs, and proceeding with the scan. The outcome of the Basic Scan offers dependable results, presenting a security snapshot for your unauthenticated and static websites. Engage with the Basic Scan for a straightforward, trustworthy evaluation of your site’s security landscape.

The Penetration Testing tab within Vooki is equipped with both an HTTP(S) interceptor and an HTTP request composer, creating an environment conducive for proficient penetration testing. Users have the capability to edit, drop, and subsequently send HTTP requests directly to the server. Additionally, Vooki introduces a Composer tab, a feature allowing users to modify and dispatch HTTP(S) requests to servers. There is also a Compare tab available, designed for users to juxtapose two HTTP requests or HTTP Response, highlighting the differences between them. This function proves invaluable during penetration testing, aiding in the identification and analysis of variances in requests. These distinctive, user-friendly features collectively facilitate a streamlined and effective penetration testing process, contributing to a thorough and reliable security assessment for web applications. Engage with Vooki’s intuitive Penetration Testing tools for a superior, secure testing experience.

The Vooki Crawler conducts thorough scanning of your website, identifying and listing all available web pages on the specified domain. This in-depth process ensures that all URLs are captured and conveniently displayed under the "Captured URL" tab for easy access and review. Engage with the Vooki Crawler for a comprehensive overview and collection of your website's URLs, enhancing your site's security assessment and management process.

The Domain & Host Scanner by Vooki meticulously sweeps through your entire website, extracting crucial data that includes information on open ports, the server, DNS configurations, web archives, certificate details, the geographical location of the server, and 'Whois' data. This comprehensive scan provides an array of significant insights, aiding in a better understanding of your website's infrastructure and security landscape. Engage with the Domain & Host Scanner for a holistic view and in-depth analysis of your website’s crucial components and configurations.

Vooki’s Cryptography section is comprised of the following essential modules:

• Encoder/Decoder: This module facilitates the conversion of data into different formats, assisting users in encoding and decoding information efficiently.
• Encryption: The Encryption module is designed to secure your data by converting it into a code to prevent unauthorized access. It is a crucial tool for safeguarding sensitive information within your web applications.
• Hashing: The Hashing module is integral for the generation of a value or values from a string of text in a way that is nearly impossible to turn back into the original string. It is vital for the secure storage and transmission of data.

These modules collectively offer a suite of tools that are indispensable for ensuring the secure handling, transmission, and storage of data within your web applications, providing users with a robust set of cryptographic utilities.