Re: how to find vulnerabilities in a freeware software

Hi Shiva,

What sort of applications are you talking about?
And written in what languages?

As you have access to the source you can use static source code
analysis tools, but which ones will depend on the languages used.

If they are web applications then you can also use web application
vulnerability scanners.
There are lots of those, but not too surprisingly I'd recommend OWASP
ZAP: https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
(I'm the ZAP project lead)

Cheers,

Simon

(resent as plain text;)

On Fri, Oct 25, 2013 at 7:41 AM,  <[email protected]> wrote:
> Hi Team,
>
>
> Please help me out in identifying the tool which will capture  vulnerabilities in a freeware/Shareware/ Open source applications
>
>
> Regard's
>
> Shiva
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>



-- 
OWASP ZAP Project leader

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------