Re: web server chacking.

[dallas jordan <dallas.jordan () gmail com>]

Juan, 
   I think nessus is one good tool you could use.  I think you could
also use Nikto.  It scans for many vulnerabilities in web servers.  
Both of these may already come on some bootable linux distros.  I know
nessus is pretty standard, but I'm not sure about nikto.

www.nessus.org
http://www.cirt.net/code/nikto.shtml

On 6/30/05, Juan B <juanbabi () yahoo com> wrote:
> HI,
>
> I want to start chacking the security of some of our
> web servers. I use open source tools ( whoppix/knoppix
> cd).
>
> what are the best open source tools to check the
> security of those webs ( checking for buffer
> overflows, cross site scripting,IIS holes,etc..)
>
> thanks,
>
> Juan
>
>
>
> ____________________________________________________
> Yahoo! Sports
> Rekindle the Rivalries. Sign up for Fantasy Football
> http://football.fantasysports.yahoo.com


-- 
Dallas Jordan CCNA, CISSP