The scan will continue as shown in the following screenshot. Step 8 − If the following table pops up, click “Yes”.

Step 6 − Click “Next” again in the following screenshot. Step 5 − Check all the boxes of the modules you want to be controlled. In this case, it is metasploitable machine → click “ Next”. Step 4 − Enter the webpage URL that will be scanned. Step 3 − To start a scan, click “+” sign. Step 2 − If you don’t see an application in the path, type the following command. Step 1 − To open Vega go to Applications → 03-Web Application Analysis → Vega Vega can be extended using a powerful API in the language of the web: JavaScript.

Vega includes an automated scanner for quick tests and an intercepting proxy for tactical inspection. It is written in Java, GUI based, and runs on Linux, OS X, and Windows.

Vega can help you find and validate SQL Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. Vega is a free and open source scanner and testing platform to test the security of web applications. In this chapter, we will learn about website penetration testing offered by Kali Linux.

Kali wireshark tutorial