Are there any open source solutions for testing web security vulnerabilities? I am not looking to make my web application bullet proof since it'll be used internally at our organization. But I'd like to test it for the bare essentials from a web security perspective.
JustBeingHelpfulJustBeingHelpful
asked Jan 14, 2013 at 17:22
2 Answers 2
Zed Attack Proxy from OWASP - https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
And generally I would advise browsing the site to learn more about security
Metasploit community edition is free - http://www.metasploit.com/about/choose-right-edition/
answered Jan 14, 2013 at 17:34
-
Burp Suite also has a free edition portswigger.net/burp. The professional edition, while not free is extremely cheap compared to other comparable solutions at 299ドル for a license.Sam Woods– Sam Woods2013年01月15日 18:21:13 +00:00Commented Jan 15, 2013 at 18:21
-
Good catch, I'd forgotten that one, though how I could forget a product with such a wonderful name...Phil Kirkham– Phil Kirkham2013年01月15日 19:53:38 +00:00Commented Jan 15, 2013 at 19:53
-
The OWASP group is a great source of info. ZAP and the WebGoat project can teach you a LOT. Webgoat is even guided, almost like taking a class. Once you feel comfortable with those concepts, download and explore some of the pre-packaged distros for this like BackTrack or SamuraiWTF. Then set up a VM and see what you can do!maznika– maznika2013年02月01日 18:38:45 +00:00Commented Feb 1, 2013 at 18:38
Here are a few tools to get you started with website/web application security testing,
Kali Linux has a whole bunch of pen testing tools
answered Mar 26, 2021 at 5:57