Re: web application vulnerability tools list needed

[psiinon <psiinon () gmail com>]

Hi Rajesh,

If you are new to web app security then you'll probably be best
starting with vulnerability scanners.
They wont find all of the vulnerabilities, but they will be a good start.
Theres a fairly comprehensive list here:
http://projects.webappsec.org/w/page/13246988/Web-Application-Security-Scanner-List

I will (of course) mention ZAP
(http://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project) which
is on that list and is free, open source, cross platform and
specifically aimed at people with less security experience ;)

Psiinon

OWASP ZAP Project Lead

On Mon, Feb 28, 2011 at 5:54 PM, Rajesh R <rajeshr1988 () gmail com> wrote:
> Hi
>
>
> As I need to do vulnerability assessment for a web application in my
> project .Please
> let me know the tools which are available to find out vulnerability in a web
> application.
>
> for both platforms windows and unix/linux and also both
> opensource/commercial products.
>
> Thanks
>
> --
>
> ------------------------------------------
>
> Thanks,
>
> Rajesh R
>
> Mobile: +91-9000-581-806
>
>
>
> --
> ------------------------------------------
>
> Thanks,
>
> Rajesh R
>
> Mobile: +91-9000-581-806
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------