Vulnerability scanning tools: Difference between revisions

Jump to navigation Jump to search

Vulnerability scanning tools (edit)

Revision as of 20:13, 8 January 2025

557 bytes removed ,  8 January 2025
m
Text replacement - ": Image:Owl icon.jpg " to "{{Tips}} "
Tags: Mobile edit Mobile web edit
m (Text replacement - ": Image:Owl icon.jpg " to "{{Tips}} ")
 
(4 intermediate revisions by the same user not shown)
Line 4: Line 4:


== 建議/可用 ==
== 建議/可用 ==
{{Gd}} [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project OWASP Zed Attack Proxy Project] (ZAP) v. 2.7.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分  OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
{{Gd}} [https://www.zaproxy.org/ ZAP] v. 2.15.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分  OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
* 作業系統: {{Win}}, {{Linux}} & {{Mac}}
* 作業系統: {{Win}}, {{Linux}} & {{Mac}}
Line 12: Line 12:
* 掃描對象:  
* 掃描對象:  
* 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing
* 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing
* 填寫個資申請: 不用
{{Gd}} [https://addons.mozilla.org/en-US/firefox/addon/xss-me/ XSS Me :: Add-ons for Firefox] 檢測正在瀏覽的網頁表單的 Cross-site scripting (XSS)、[https://addons.mozilla.org/en-us/firefox/addon/sql-inject-me/?src=userprofile SQL Inject Me :: Add-ons for Firefox] 檢測正在瀏覽的網頁表單的 SQL Injection
* 公司/維護者: [https://addons.mozilla.org/en-US/firefox/user/security-compass/ Security Compass]
* 作業系統: 跨平台 {{Fx}}
* 授權:
* 試用版限制:
* 檔案掃毒:
* 掃描對象: 正在瀏覽的網頁
* 掃描報告內容:
* 填寫個資申請: 不用
* 填寫個資申請: 不用


Line 166: Line 156:


== 不建議使用試用版 ==
== 不建議使用試用版 ==
: [[Image:Owl icon.jpg]] 由於試用版功能限制或者是安裝檔的 VirusTotal 掃毒結果有疑慮，所以不推薦。
{{Tips}} 由於試用版功能限制或者是安裝檔的 VirusTotal 掃毒結果有疑慮，所以不推薦。


[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。報告內容有標示漏洞嚴重程度。
[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。報告內容有標示漏洞嚴重程度。
Line 263: Line 253:
== Related pages ==
== Related pages ==
* [[Web_Ping#SSL_Server_Test | SSL Server Test]]
* [[Web_Ping#SSL_Server_Test | SSL Server Test]]
* [https://errerrors.blogspot.com/2024/03/free-wordpress-vulnerability-scan-tool.html 免費 WordPress 網站弱點掃描工具]


== References ==
== References ==
Retrieved from "https://wiki.planetoid.info/index.php/Special:MobileDiff/22474...25318"

Navigation menu