This site is under construction. All information available is for learning purposes only. Thank you.
Burp Suite
Website: portswigger.net/burp
Description: Burp Suite is a leading platform for web application security testing. It features an intercepting proxy, scanner, and a host of tools to help in manual and automated testing of web applications.
Features:
Free version: Basic manual testing tools such as proxy and repeater
Paid version (Pro): Automated scanning, advanced manual tools, and more extensive testing features
Vulnerability scanner for detecting SQL injection, XSS, and other common web vulnerabilities
Extensibility through a plugin system
Platforms: Cross-platform (Linux, Windows, macOS)
Nikto2
Website: cirt.net/Nikto2
Description: Nikto is an open-source web server scanner that performs a wide range of tests against web servers to find vulnerabilities. It scans for configuration issues, outdated software, dangerous files, and potential vulnerabilities.
Features:
Scans for over 6,400 potentially dangerous files and CGIs
Detects outdated server versions for over 1,200 servers
Finds version-specific problems for over 270 servers
Can identify security misconfigurations and common vulnerabilities
Platforms: Cross-platform (Linux, Windows)
OWASP Mutillidae II
Website: OWASP Mutillidae II Project
Description: OWASP Mutillidae II is an intentionally vulnerable web application designed for security testing and training purposes. It provides a real-world environment for practicing web application attacks and defenses.
Features:
Deliberately vulnerable to allow testing of various web vulnerabilities, including SQL injection, XSS, and CSRF
Ideal for labs, classrooms, and vulnerability assessment practice
Easy installation on Linux and Windows environments
Regularly updated to reflect real-world vulnerabilities and attacks
Platforms: Cross-platform (Linux, Windows)
These tools are widely used in web security testing, allowing penetration testers and security enthusiasts to explore vulnerabilities in web applications and servers in both controlled and real-world environments.