it is a web application mapper

1. SUBJECT
CYBER SICURITY
PREPARED BY :
Kevin dias (150110109017)
Vasu khirsariya (150110109018)
Yash kothadia (150110109019)

2. - A Web application mapper

3. What's GoLismero?
• GoLismero, The Web Knife is an open source
framework for security testing.
• It's currently geared towards web security, but
it can easily be expanded to other kinds of
scans.
• Developers:
Daniel Garcia and Mario Vilas

4. Features
• Real platform independence. Tested on Windows, Linux, *BSD
and OS X
• No native library dependencies. All framework has been
written in pure Python
• Good performance
• Very easy to use
• Plugin development is extremely simple
• Collects and unifies the results of well known tools: sqlmap,
xsser, openvas, dnsrecon, theharvester...
• Integration with standards: CWE, CVE and OWASP
• Design for cluster deployment in near future

5. Commands
• Scan a website
golismero scan <target>
• You can omit the default command "scan"
golismero <target>
• You can also set a name for your audit with --
audit-name
golismero scan <target> --audit-name <name>

6. • To display the list of available plugins
golismero plugins

7. • To display the available profiles
golismero proflies

8. • To scan the target and generate database file
golismero scan <target> -db database.db -no

9. • And then generate the report from the
database
golismero report report.html -db database.db

10. Select a specific plugin
• Use the -e option to enable only some specific
plugins, and -d to disable plugins
golismero scan <target> -e <plugin>

11. Upcoming features
• Integration with Metasploit, w3af, ZAP and
many other free tools
• Web UI
• Export results in PDF and MS Word format
• And more plugins