Re: web application scanning

[Greg Williams <gwillia5 () UCCS EDU>]

+1 for W3AF for general web applications and code.  OpenVAS will detect specific application framework issues.  Nessus 
will do the same.

Here is a great article from last August that dives into each Web Application Scanner and its features.  Open Source 
and Commercial  http://sectooladdict.blogspot.com/2011/08/commercial-web-application-scanner.html 

Greg Williams
IT Security Principal
University of Colorado at Colorado Springs
Website: http://www.uccs.edu/itsecure



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Michael 
Sheinberg
Sent: Tuesday, February 07, 2012 12:45 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] web application scanning

Hello,

Does anyone here have any recommendations for tools (preferably
open-source) that will scan web-servers for vulnerable application frameworks + plug-ins?

Stuff like looking for out-of-date Drupal, Joomla, etc. Obviously I can find some of these tools with Google on my own, 
just curious if anyone has any positive experience with any in particular.

Thanks!
--
-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
Michael Sheinberg
Network Security Administrator, CETS

School of Engineering and Applied Science -~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~