Re: OWASP Top 10 penetration testing software?
Tim Gonzales <[email protected]>
| Newsgroups | gmane.comp.security.penetration |
|---|---|
| Message-ID | <CADLYcHNTTFeKQYxNv7cHMtOWyBFpF0MDqzyhETBjj6oxRS_w1Q@mail.gmail.com> |
Have you looked at burp scanner? It will test for what you are looking for and more. On 2/28/12, webcat <[email protected]> wrote: > > Hi, for one of my websites, I have been required to use a web application > scanner that tests against the OWASP Top Ten threats. I'm looking for a > scanner that does this that is inexpensive or free. > > Possible scanners I've found for this include the OWASP Zed Attach Proxy > Project, Sonar, and w3af, but none of these explicitly tests against the > OWASP Top Ten threats (at least not that I can tell). > > Does anyone know of a scanner that does test against the OWASP Top Ten > threats? Thank you! > -- > View this message in context: > http://old.nabble.com/OWASP-Top-10-penetration-testing-software--tp33409197p33409197.html > Sent from the Penetration Testing mailing list archive at Nabble.com. > > > ------------------------------------------------------------------------ > This list is sponsored by: Information Assurance Certification Review Board > > Prove to peers and potential employers without a doubt that you can actually > do a proper penetration test. IACRB CPT and CEPT certs require a full > practical examination in order to become certified. > > http://www.iacertification.org > ------------------------------------------------------------------------ > > -- Sent from my mobile device ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------