Are there any open source solutions for testing web security vulnerabilities? I am not looking to make my web application bullet proof since it'll be used internally at our organization. But I'd like to test it for the bare essentials from a web security perspective.
asked Jan 14, 2013 at 17:22
Add a comment
|
2 Answers
Zed Attack Proxy from OWASP - https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
And generally I would advise browsing the site to learn more about security
Metasploit community edition is free - http://www.metasploit.com/about/choose-right-edition/
answered Jan 14, 2013 at 17:34
-
Burp Suite also has a free edition portswigger.net/burp. The professional edition, while not free is extremely cheap compared to other comparable solutions at $299 for a license. Jan 15, 2013 at 18:21
-
Good catch, I'd forgotten that one, though how I could forget a product with such a wonderful name... Jan 15, 2013 at 19:53
-
The OWASP group is a great source of info. ZAP and the WebGoat project can teach you a LOT. Webgoat is even guided, almost like taking a class. Once you feel comfortable with those concepts, download and explore some of the pre-packaged distros for this like BackTrack or SamuraiWTF. Then set up a VM and see what you can do!– maznikaFeb 1, 2013 at 18:38
Here are a few tools to get you started with website/web application security testing,
Kali Linux has a whole bunch of pen testing tools
answered Mar 26, 2021 at 5:57
