Vulnerability scanning tools: Difference between revisions

Jump to navigation Jump to search
no edit summary
No edit summary
No edit summary
Line 7: Line 7:
* 試用版限制: (1) 10 次免費的掃描 (2) 掃描報告包含 threat, patch, OWASP 三種類型,沒有提供 SCAP ([https://www.qualys.com/solutions/compliance/scap/ Security Content Automation Protocol]) report
* 試用版限制: (1) 10 次免費的掃描 (2) 掃描報告包含 threat, patch, OWASP 三種類型,沒有提供 SCAP ([https://www.qualys.com/solutions/compliance/scap/ Security Content Automation Protocol]) report
* 檔案掃毒: N/A
* 檔案掃毒: N/A
* 填寫個資申請: 要


[http://wapiti.sourceforge.net/ Wapiti : a Free and Open-Source web-application vulnerability scanner in Python for Windows, Linux, BSD, OSX]
[http://wapiti.sourceforge.net/ Wapiti : a Free and Open-Source web-application vulnerability scanner in Python for Windows, Linux, BSD, OSX]
Line 14: Line 15:
* 試用版限制: N/A
* 試用版限制: N/A
* 檔案掃毒: [https://www.virustotal.com/zh-tw/file/6b836a4810f17b7eda4345fb12293112129961ba243140c72a8da0ac2572f4b4/analysis/ VirusTotal 掃描結果 ok]
* 檔案掃毒: [https://www.virustotal.com/zh-tw/file/6b836a4810f17b7eda4345fb12293112129961ba243140c72a8da0ac2572f4b4/analysis/ VirusTotal 掃描結果 ok]
* 填寫個資申請: 不用


[https://github.com/sullo/nikto sullo/nikto: Nikto web server scanner] 提供網站伺服器版本更新或設定的建議 {{access | date = 2016-12-05}}
[https://github.com/sullo/nikto sullo/nikto: Nikto web server scanner] 提供網站伺服器版本更新或設定的建議 {{access | date = 2016-12-05}}
Line 21: Line 23:
* 試用版限制: N/A
* 試用版限制: N/A
* 檔案掃毒: [https://www.virustotal.com/zh-tw/file/9e9b5798bde7a277330240586e00399f12d8deb256058910a5b9007582144bb5/analysis/ VirusTotal 掃描結果 ok]
* 檔案掃毒: [https://www.virustotal.com/zh-tw/file/9e9b5798bde7a277330240586e00399f12d8deb256058910a5b9007582144bb5/analysis/ VirusTotal 掃描結果 ok]
* 填寫個資申請: 不用


[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。
[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。
Line 28: Line 31:
* 試用版限制: (1) 只能試用 14 天、(2) 掃描報告會說有怎樣的風險問題(vulnerability),但是不會說明問題是出在哪個地方 {{exclaim}}
* 試用版限制: (1) 只能試用 14 天、(2) 掃描報告會說有怎樣的風險問題(vulnerability),但是不會說明問題是出在哪個地方 {{exclaim}}
* 檔案掃毒: [https://www.virustotal.com/zh-tw/file/50507375bdbbeae1a228aedbba2aea85091ce765242e603e21e7fe1b70f3d182/analysis/ VirusTotal 掃描結果 ok]
* 檔案掃毒: [https://www.virustotal.com/zh-tw/file/50507375bdbbeae1a228aedbba2aea85091ce765242e603e21e7fe1b70f3d182/analysis/ VirusTotal 掃描結果 ok]
* 填寫個資申請: 要


[http://www-03.ibm.com/software/products/en/appscan-standard IBM Security AppScan Standard]
[http://www-03.ibm.com/software/products/en/appscan-standard IBM Security AppScan Standard]
Line 35: Line 39:
* 試用版限制: 只能掃描 demo.testfire.net
* 試用版限制: 只能掃描 demo.testfire.net
* 檔案掃毒:
* 檔案掃毒:
* 填寫個資申請: 要


[http://www.golismero.com/ Golismero Project. The web knife.] ([https://github.com/golismero/golismero github])
[http://www.golismero.com/ Golismero Project. The web knife.] ([https://github.com/golismero/golismero github])
Line 42: Line 47:
* 試用版限制:  
* 試用版限制:  
* 檔案掃毒: 有問題 [https://www.virustotal.com/zh-tw/file/a715d1f88e736a81acff5edb6edc77486d97a93ce2fa2906aea286f695b704e7/analysis/ VirusTotal 偵測率: 5/54]
* 檔案掃毒: 有問題 [https://www.virustotal.com/zh-tw/file/a715d1f88e736a81acff5edb6edc77486d97a93ce2fa2906aea286f695b704e7/analysis/ VirusTotal 偵測率: 5/54]
* 填寫個資申請: 不用


[https://github.com/Te-k/phpscanner Te-k/phpscanner: Php Scanner for malicious files]
[https://github.com/Te-k/phpscanner Te-k/phpscanner: Php Scanner for malicious files]
Line 49: Line 55:
* 試用版限制:  
* 試用版限制:  
* 檔案掃毒: 有問題 [https://www.virustotal.com/zh-tw/file/cd6bac1e4b8b1f56ef43f6b2e1c6950066b78408829c70b4657cb5b2a730c37a/analysis/1480922884/  VirusTotal 偵測率: 3 / 55]
* 檔案掃毒: 有問題 [https://www.virustotal.com/zh-tw/file/cd6bac1e4b8b1f56ef43f6b2e1c6950066b78408829c70b4657cb5b2a730c37a/analysis/1480922884/  VirusTotal 偵測率: 3 / 55]
* 填寫個資申請: 不用


[http://www8.hp.com/us/en/software-solutions/webinspect-dynamic-analysis-dast/index.html?#.Uuf0KBAo4iw Dynamic Analysis, DAST, Penetration Testing Tools | Hewlett Packard Enterprise]
[http://www8.hp.com/us/en/software-solutions/webinspect-dynamic-analysis-dast/index.html?#.Uuf0KBAo4iw Dynamic Analysis, DAST, Penetration Testing Tools | Hewlett Packard Enterprise]
Line 56: Line 63:
* 試用版限制: (1)只能試用 15 天、(2) 只能掃描 zero.webappsecurity.com  
* 試用版限制: (1)只能試用 15 天、(2) 只能掃描 zero.webappsecurity.com  
* 檔案掃毒:
* 檔案掃毒:
* 填寫個資申請: 要


[https://subgraph.com/vega/ Vega Vulnerability Scanner]
[https://subgraph.com/vega/ Vega Vulnerability Scanner]
Line 63: Line 71:
* 試用版限制:  
* 試用版限制:  
* 檔案掃毒: VirusTotal 掃描結果 [https://www.virustotal.com/zh-tw/file/14f7eee1f41ef9241efeb2321731f8dda9ac0716805132c1a02f07994d86415f/analysis/][https://www.virustotal.com/zh-tw/file/67687ae29a6d99c7ba8786b9cedbda3213321ad862e8adf41f8a9d94a8f4d732/analysis/][https://www.virustotal.com/zh-tw/file/4fad49e588f64426a3da72925d912f863eab94c748a5d4d47358147a90a7732a/analysis/]
* 檔案掃毒: VirusTotal 掃描結果 [https://www.virustotal.com/zh-tw/file/14f7eee1f41ef9241efeb2321731f8dda9ac0716805132c1a02f07994d86415f/analysis/][https://www.virustotal.com/zh-tw/file/67687ae29a6d99c7ba8786b9cedbda3213321ad862e8adf41f8a9d94a8f4d732/analysis/][https://www.virustotal.com/zh-tw/file/4fad49e588f64426a3da72925d912f863eab94c748a5d4d47358147a90a7732a/analysis/]
* 填寫個資申請: 不用


[https://info.beyondtrust.com/community.html Retina Network Community - BeyondTrust] 比較是掃描作業系統,而不是掃描網站應用
[https://info.beyondtrust.com/community.html Retina Network Community - BeyondTrust] 比較是掃描作業系統,而不是掃描網站應用
Line 70: Line 79:
* 試用版限制:  
* 試用版限制:  
* 檔案掃毒: Eset 掃毒 ok
* 檔案掃毒: Eset 掃毒 ok
* 填寫個資申請: 要


<pre>
<pre>
Line 78: Line 88:
* 試用版限制:  
* 試用版限制:  
* 檔案掃毒:
* 檔案掃毒:
* 填寫個資申請:
</pre>
</pre>


Navigation menu