Web Application Security 101 - 03 Web Security Toolkit

13
Web Security Toolkit Introduction to the tools we will be using during the course.

TAGS:

description

In part 3 of Web Application Security 101 you will get introduced to the standard security toolkit. You will get access to Websecurify Suite to start hacking your way through the rest of the course.

Transcript of Web Application Security 101 - 03 Web Security Toolkit

Page 1: Web Application Security 101 - 03 Web Security Toolkit

Web Security ToolkitIntroduction to the tools we will be using during the course.

Page 2: Web Application Security 101 - 03 Web Security Toolkit

Some Words Of WisdomGood tools are important but your skills and experience is even more.

Page 3: Web Application Security 101 - 03 Web Security Toolkit

VeteransNmap (NSE)

Nikto (libwhisker)

Netcat

Wget

Curl

Standard Browsers

Page 4: Web Application Security 101 - 03 Web Security Toolkit

ProxiesZap

Burp

Paros

WebScarab

Proxify

BadAssProxy

Page 5: Web Application Security 101 - 03 Web Security Toolkit

HelpersDirbuster

Good Dictionaries

Collection Of Useful Scripts

Page 6: Web Application Security 101 - 03 Web Security Toolkit

Browser ExtensionsWebsecurify for Chrome and Firefox

Live HTTP Headers

Firebug

Tamper Data

Web Developer

Dev Tools

Page 7: Web Application Security 101 - 03 Web Security Toolkit

Commercial ScannersWebsecurify Scanner and Recon

Acunetix

AppScan

WebInspect

Netsparker

Page 8: Web Application Security 101 - 03 Web Security Toolkit

Free ScannersWebsecurify Foundation

w3af

Arachni

Page 9: Web Application Security 101 - 03 Web Security Toolkit

AppliancesQualys

Nessus

Nexpose

Page 10: Web Application Security 101 - 03 Web Security Toolkit

ExploitationCustom Tools

w3af

Metasploit

Page 11: Web Application Security 101 - 03 Web Security Toolkit

Continuous IntegrationWebsecurify Cohesion

Fortify

Page 12: Web Application Security 101 - 03 Web Security Toolkit

NextWe will be using some of these tools during the course.

Page 13: Web Application Security 101 - 03 Web Security Toolkit

Challenges1. Make sure that you have a running UNIX/Linux environment.

2. Install a proxy such as burp, zap, paros, proxify or any other.

3. Get an account on Websecurify Suite to get access to advanced tools.