Re: Need a Opensource tool for application scanning

Rohit Pitke <[email protected]> Fri, 24 May 2013 15:13:08 -0700 (PDT)
Newsgroups gmane.comp.security.websecurity,gmane.comp.security.web-applications,gmane.comp.security.penetration
Message-ID <[email protected]>
Additionally, you can use Ratproxy and skipfish.
If you are concerned about individual vulnerabilities, I would suggest sqlmap (for SQL injection), XSSRay (for XSS), Nikto (Directory Access) 


________________________________
 From: Seba <[email protected]>
To: Muruganandam C <[email protected]> 
Cc: [email protected]; [email protected]; web security <[email protected]> 
Sent: Wednesday, May 22, 2013 11:48 PM
Subject: Re: [WEB SECURITY] Need a Opensource tool for application scanning
 


Hi Muruganandam,
OWASP Zed Attack Proxy Project is the perfect tool for you.
It has automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. 

more info & download on https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

regards

Seba




On Thu, May 23, 2013 at 8:35 AM, Muruganandam C <[email protected]> wrote:

Hi All,
>
>could you please let me know about application vulnerability scanning tool.
>
>Thanks
>Muruganandam
>
>_______________________________________________
>The Web Security Mailing List
>
>WebSecurity RSS Feed
>http://www.webappsec.org/rss/websecurity.rss
>
>Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA
>
>WASC on Twitter
>http://twitter.com/wascupdates
>
>[email protected]
>http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org
>

_______________________________________________
The Web Security Mailing List

WebSecurity RSS Feed
http://www.webappsec.org/rss/websecurity.rss

Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA

WASC on Twitter
http://twitter.com/wascupdates

[email protected]
http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org

_______________________________________________
The Web Security Mailing List

WebSecurity RSS Feed
http://www.webappsec.org/rss/websecurity.rss

Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA

WASC on Twitter
http://twitter.com/wascupdates

[email protected]
http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org