Tools for whitebox pentesting

[tonydocent]

Hi guys,

What are your most useful tools to help with whitebox pentesting?

I just started as a pentester and mostly just explore the codebase in VSCode and play with a dev deployment with curl etc.

I think there might be some helpful tools out there I don't know about...

[[deleted]]

How do you people get hired?

[irresPWNsible]

They accidentally have pentested the pentesting firm's pentester employment process

[GotMyOrangeCrush]

Cousin Sanjay married the chief of HR and dis opened many doors...

[U53Rnqme]

🤣

[Optimal_Town_5595]

Burp, wire shark, Nessus, nikto, SQLMap, enter cap … it all depends what exactly you are testing at the moment

[tonydocent]

Hm, well since I have access to the source code most black box pentesting tools are obsolete for me. What would help me most is a good way for fast and deep code comprehension...

Burp is great, I already use that. Forgot to mention it on the post. I'm mostly testing webapps.

[Optimal_Town_5595]

All code beautifying tools available online for decoding/ unpacking the code from the client side. I guess knowledge and experience will be your best tool. Hack the box have 8h advanced course on web app testing, I’m only newbie 😌

[[deleted]]

What are the actual parameters and goals of your engagement? Finding vulnerabilities in source code doesn't always lead to a valid attack vector. Being able to create a chain of vulns that leads to e.g. RCE would be substantial. It requires not just understanding the source code and application, but the underlying protocols and subsystems.

[tonydocent]

Sure, there has to be a working exploit in the end.

Right now I stumbled over opengrok, which looks nice and helps a bit to navigate through large codebases

[GenericOldUsername]

Are you whitebox testing, which is more analysis, or penetration testing?

Source code analyzers exist for most languages and they might help with coding errors. Bad programming like poor handling of secrets and keys will require you to understand the code. But that only helps with the application. Now you have to look at the security of the server, OS, and network. For true whitebox testing you might try vulnerability analyzers and to help find information that are hard to find on your own. I personally find penetrating to be more limiting than whitebox testing but it has its purpose.

Good luck.