Vulnerability scanning tools: Difference between revisions

Jump to navigation Jump to search
m
Text replacement - ": Image:Owl icon.jpg " to "{{Tips}} "
(→‎建議/可用: remove XSS Me)
m (Text replacement - ": Image:Owl icon.jpg " to "{{Tips}} ")
 
(3 intermediate revisions by the same user not shown)
Line 4: Line 4:


== 建議/可用 ==
== 建議/可用 ==
{{Gd}} [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project OWASP Zed Attack Proxy Project] (ZAP) v. 2.7.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分  OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
{{Gd}} [https://www.zaproxy.org/ ZAP] v. 2.15.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分  OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
* 作業系統: {{Win}}, {{Linux}} & {{Mac}}
* 作業系統: {{Win}}, {{Linux}} & {{Mac}}
Line 156: Line 156:


== 不建議使用試用版 ==
== 不建議使用試用版 ==
: [[Image:Owl icon.jpg]] 由於試用版功能限制或者是安裝檔的 VirusTotal 掃毒結果有疑慮,所以不推薦。
{{Tips}} 由於試用版功能限制或者是安裝檔的 VirusTotal 掃毒結果有疑慮,所以不推薦。


[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。報告內容有標示漏洞嚴重程度。
[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。報告內容有標示漏洞嚴重程度。
Line 253: Line 253:
== Related pages ==
== Related pages ==
* [[Web_Ping#SSL_Server_Test | SSL Server Test]]
* [[Web_Ping#SSL_Server_Test | SSL Server Test]]
* [https://errerrors.blogspot.com/2024/03/free-wordpress-vulnerability-scan-tool.html 免費 WordPress 網站弱點掃描工具]


== References ==
== References ==

Navigation menu