12种开源Web安全扫描程序

时间:2024-04-13 15:56:03

1. Arachni

Arachni是一款基于Ruby框架构建的高性能安全扫描程序,适用于现代Web应用程序。它可用于Mac,Windows和Linux的便携式二进制文件

Arachnin能适用于下面的平台和语言

  • Windows, Solaris, Linux, BSD, Unix
  • Nginx, Apache, Tomcat, IIS, Jetty
  • Java, Ruby, Python, ASP, PHP
  • Django, Rails, CherryPy, CakePHP, http://ASP.NET MVC, Symfony

漏洞检测有下面这些:

  • NoSQL/Blind/SQL/Code/LDAP/Command/XPath injection
  • Cross-site request forgery
  • Path traversal
  • Local/Remote File inclusions
  • Response splitting
  • Cross-site scripting
  • Unvalidated DOM redirects
  • Source code disclosure

</