Browsing the "Application Scanner" Tag

wcanalyzer.com A free security service that audits your web.config settings

December 20th, 2010 | by NJ Ouchn

A free SaaS mode for analyzing security issues and vulnerabilities on web.config settings. A very interesting project to follow

Acunetix WVS Version 7 build 20101216 released

December 20th, 2010 | by NJ Ouchn

Acunetix Web Vulnerability Scanner (WVS) is an automated web application security testing tool that audits your web applications by checking for exploitable hacking vulnerabilities. Automated scans may be supplemented and cross-checked with the variety of manual tools to allow for comprehensive web site and web application penetration testing

websecurify v0.8 Alpha 4 available

December 20th, 2010 | by NJ Ouchn

Websecurify is a powerful web application security testing environment designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies

CSRF HTML made easy with Pinata CSRF Version 0.93.

December 20th, 2010 | by NJ Ouchn

Pinata is a Python Script that will generate Proof of Concept CSRF HTML from HTTP request

OWASP Zed Attack Proxy Project v1.1.0

December 18th, 2010 | by NJ Ouchn

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

A complete guide to securing a website

December 18th, 2010 | by NJ Ouchn

To secure a website or a web application, one has to first understand the target application, how it works and the scope behind it. Ideally, the penetration tester should have some basic knowledge of programming and scripting languages, and also web security.

OWASP AntiSamy v1.4.2 Released

December 17th, 2010 | by NJ Ouchn

The OWASP AntiSamy project is a few things. Technically, it is an API for ensuring user-supplied HTML/CSS is in compliance within an application's rules. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get persisted on the server. The term "malicious code" in regards to web applications usually mean "JavaScript." Cascading Stylesheets are only considered malicious when they invoke the JavaScript engine