TOOL TUTORIAL · Web Application Security Assessment
How to install and use Skipfish
Skipfish is an open-source web application security scanner that actively crawls a website to detect vulnerabilities and security issues. It generates a detailed interactive sitemap, leveraging recursive crawl and dictionary-based probes to identify and highlight potential secur…
Quick install:
sudo apt install skipfish
Installation steps
- Run sudo apt install skipfish to install it
- Pick a target site that you own
- Run skipfish -o report http://yoursite/ to scan
- Open the report folder to read the findings