8 Useful And Free Web Application Security Testing

Smashing Apps has been featured at Wordpress Showcase. If you like Smashing Apps and would like to share your love with us so you can click here to rate us.

With the development of more and more interactive and complex websites, it has become necessary that website owners ensure the security of their websites. For this reason, number of free web based tools and applications are available on the net. One cannot ensure that his website is completely safe without running security tests. Therefore, such types of web based applications and security testing tools are precious.

In this round up, we have gathered some free web application security testing tools for you. These tools help you run security tests and will let you identify any possible security loophole. So, take a look at this compilation and make your website safe from the security threats. Feel free to share your opinion with us via comment section below.

Wapiti

Wapiti allows you to audit the security of your web applications. It performs “black-box” scans, i.e. it does not study the source code of the application but it will scan the webpages of the deployed webapp, looking for scripts and forms where it can inject data.

Netsparker Community Edition

Netsparker Community Edition is a SQL Injection Scanner. It’s a free edition of our web vulnerability scanner for the community so you can start securing your website now. It’s user friendly, fast, smart and as always False-Positive-Free.

N-Stalker Free Version

N-Stalker Web Application Security Scanner 2012 Free Edition provides a restricted set of free Web Security Assessment checks to enhance the overall security of your web server infrastructure, using the most complete web attack signature database available in the market – “N-Stealth Web Attack Signature Database”.

Websecurify

Websecurify is an advanced testing solution built to quickly and accurately identify web application security issues.

Skipfish

Skipfish is an active web application security reconnaissance tool. It prepares an interactive sitemap for the targeted site by carrying out a recursive crawl and dictionary-based probes. The resulting map is then annotated with the output from a number of active (but hopefully non-disruptive) security checks. The final report generated by the tool is meant to serve as a foundation for professional web application security assessments.

Exploit-Me

Exploit-Me is a suite of Firefox web application security testing tools designed to be lightweight and easy to use. The Exploit-Me series was originally introduced at the SecTor conference in Toronto. The slides for the presentation are available for download. Along with this SecTor is making the audio of the talk available.

OWASP WebScarab Project

WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is written in Java, and is thus portable to many platforms. WebScarab has several modes of operation, implemented by a number of plugins. In its most common usage, WebScarab operates as an intercepting proxy, allowing the operator to review and modify requests created by the browser before they are sent to the server, and to review and modify responses returned from the server before they are received by the browser.

X5s

x5s is a Fiddler addon which aims to assist penetration testers in finding cross-site scripting vulnerabilities. This is not a point and shoot tool, it requires some understanding of how encoding issues lead to XSS, and it requires manual driving. See the Quickstart Tutorial to jump right in but be ready to do a little work.

Related posts:

  1. 5 Free Internet Security Tools That Are Absolutely Useful

  2. Top 10 Most Popular Free Security Software (Computer Security Day Special)

  3. Before You Go Live, Test Your Website Security With Websecurify

  4. The 7 Most Advanced (And Free To Use) System Security Tools For Windows 7



Read more: http://www.smashingapps.com/2012/06/05/8-useful-and-free-web-application-security-testing-tools.html#ixzz2qTxoX7R7


转载于:https://my.oschina.net/mickelfeng/blog/193423

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值