Re: OWASP Top 10 penetration testing software?
"M. Hani Benhailes" <[email protected]>
| Newsgroups | gmane.comp.security.penetration |
|---|---|
| Message-ID | <[email protected]> |
On 02/28/2012 08:35 PM, webcat wrote: > Hi, for one of my websites, I have been required to use a web application > scanner that tests against the OWASP Top Ten threats. I'm looking for a > scanner that does this that is inexpensive or free. > > Possible scanners I've found for this include the OWASP Zed Attach Proxy > Project, Sonar, and w3af, but none of these explicitly tests against the > OWASP Top Ten threats (at least not that I can tell). > > Does anyone know of a scanner that does test against the OWASP Top Ten > threats? Thank you! Hi, w3af has an OWASP TOP 10 scanning profile but I can't tell how good it is. Cheers, Hani. -- M. Hani Benhabiles OWASP Algeria Student Chapter: Founder/President. http://www.owaspalgeriasc.org https://www.owasp.org/index.php/Algeria_Student_Chapter Email: [email protected] Twitter: https://twitter.com/#!/kroosec Blog: http://kroosec.blogspot.com ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------