Web application security - the fast guide 1.1 | Page 162

Chapter 8 - Attack Tools
P a g e | 162
.
Figure 56:Pref Bar options
8.2.7 Wappalyzer:
is a browser extension that uncovers the technologies used on websites.
It detects content management systems, e-Commerce platforms, web
servers, JavaScript frameworks, analytics tools and many more.
Figure 57:list of used technologies on the probed site
8.2.8 XSS Rays extension for chrome:
helps penetration test for large web sites. It's core features include a XSS
scanner, XSS Reverser and object inspection, ability to a show how certain
page filters output using blackbox reverse a XSS filter without needing the
source code.
The extension also enables extract/view and edit forms non-destructively
that normally can't be edited.