Re: web application scanner question

[Himanshu Goyal <idhimanshu () gmail com>]

Acunetix and appscan are good tools.

Regards,
Himanshu

On Mon, Jan 11, 2010 at 10:47 PM, Ryan Giobbi <ryan () tgbemail com> wrote:
> Hello pen-test readers,
>
> I'm looking for recommendations on an easy-to use web application
> scanner. It doesn't need to be free. It can be an application or
> server-based. I'd like to avoid appliances.
>
> I need one that can do the below.
> * handle form, cookie, HTTP, and NTLM authentication
> * provides reporting and logging in a sane format
> * easy to configure, launch and run.
> * test HTML, HTTP headers, script and very basic SSL problems
>
> I'm not worried about missing critical but hard-to-find
> vulnerabilities or issues in various browser plugins. In terms of
> accuracy, the tool should catch the most common issues (xss, plain
> text credentials, injection, etc) quickly.
>
> Thanks for the opinions!!
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
> and CEPT certs require a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------