Web Application Deep-Dive

Tool Chain

Steps

1. Authentication Detection AuthProbe

   Detect and validate all auth methods on the target application.

   Input	Target web app URL
   Output	Auth method report, recommended config for Fracture/Siphon
   Usage	authprobe.py <url> --rendered --json
   Notes	Run with --rendered for JavaScript-rendered login forms.

2. Web Application Testing (OWASP Top 10) Fracture

   Full OWASP Top 10 2025 assessment: injection, broken auth, XSS, SSRF, misconfig, vulnerable components.

   Input	Target URL + auth config from AuthProbe
   Output	findings.json, evidence/
   Usage	fracture.py -t <target> -o <output_dir> [auth flags]
   Notes	Run all phases for comprehensive coverage. Manage via Crucible.

3. API Security Testing (OWASP API Top 10) Siphon

   API endpoint discovery, BOLA/BFLA testing, mass assignment, injection, spec compliance.

   Input	API base URL + optional OpenAPI spec + auth config
   Output	findings.json, api_inventory.json, api_map.json
   Usage	siphon.py -t <api_url> -o <output_dir> [--spec <spec>]
   Notes	Provide OpenAPI spec for thorough spec-based testing.

4. Advanced Injection Testing pAIn

   Focused injection testing: SQL, NoSQL, LDAP, command injection with multiple payload formats.

   Input	Target URLs / parameters identified by Fracture/Siphon
   Output	findings.json
   Usage	pain.py -t <target> -o <output_dir> [payload flags]
   Notes	Use for deep-dive injection testing on parameters flagged by Fracture/Siphon.

5. Reporting Prometheus

   Merge web app and API findings, deduplicate, generate report.

   Input	Fracture + Siphon + pAIn run directories
   Output	Unified web application report
   Usage	prometheus.py -i <run_dirs...> -o <report_dir>
   Notes	Includes OWASP coverage matrix in report.