Vulnerability scanning tools - Revision history

Planetoid: Text replacement - ": Image:Owl icon.jpg " to "{{Tips}} "

2025-01-08T12:13:59Z

Text replacement - ": Image:Owl icon.jpg " to "{{Tips}} "

← Older revision		Revision as of 20:13, 8 January 2025
Line 156:		Line 156:

	== 不建議使用試用版 ==		== 不建議使用試用版 ==
	~~: [[Image:Owl icon.jpg]]~~ 由於試用版功能限制或者是安裝檔的 VirusTotal 掃毒結果有疑慮，所以不推薦。		{{Tips}} 由於試用版功能限制或者是安裝檔的 VirusTotal 掃毒結果有疑慮，所以不推薦。

	[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。報告內容有標示漏洞嚴重程度。		[http://www.acunetix.com/ Website security with Acunetix] v.11 產生報表可區分 ISO 27001, NIST SP800 53, OWASP Top 10 2013, PCI DSS 3.2, Sarbanes Oxley, STIG DISA, WASC Threat Classification 等類型。報告內容有標示漏洞嚴重程度。

Planetoid: /* Related pages */

2024-09-19T07:05:44Z

← Older revision		Revision as of 15:05, 19 September 2024
Line 253:		Line 253:
	== Related pages ==		== Related pages ==
	* [[Web_Ping#SSL_Server_Test \| SSL Server Test]]		* [[Web_Ping#SSL_Server_Test \| SSL Server Test]]
			* [https://errerrors.blogspot.com/2024/03/free-wordpress-vulnerability-scan-tool.html 免費 WordPress 網站弱點掃描工具]

	== References ==		== References ==

Planetoid: /* 建議/可用 */

2024-09-19T07:04:56Z

建議/可用

← Older revision		Revision as of 15:04, 19 September 2024
Line 4:		Line 4:

	== 建議/可用 ==		== 建議/可用 ==
	{{Gd}} [https://www.zaproxy.org/ ZAP] v. 2.7.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分 OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。		{{Gd}} [https://www.zaproxy.org/ ZAP] v. 2.15.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分 OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
	* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]		* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
	* 作業系統: {{Win}}, {{Linux}} & {{Mac}}		* 作業系統: {{Win}}, {{Linux}} & {{Mac}}

Planetoid: /* 建議/可用 */

2024-09-19T06:47:22Z

建議/可用

← Older revision		Revision as of 14:47, 19 September 2024
Line 4:		Line 4:

	== 建議/可用 ==		== 建議/可用 ==
	{{Gd}} [https://www.~~owasp~~.org/~~index.php/OWASP_Zed_Attack_Proxy_Project OWASP Zed Attack Proxy Project~~] ~~(ZAP)~~ v. 2.7.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分 OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。		{{Gd}} [https://www.zaproxy.org/ ZAP] v. 2.7.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分 OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
	* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]		* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
	* 作業系統: {{Win}}, {{Linux}} & {{Mac}}		* 作業系統: {{Win}}, {{Linux}} & {{Mac}}

Unknown user: /* 建議/可用 */ remove XSS Me

2024-01-29T09:49:41Z

建議/可用: remove XSS Me

@@ Line 12: / Line 12: @@
 * 掃描對象:
 * 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing
 * 填寫個資申請: 不用

Unknown user: /* 建議/可用 */

2021-12-11T08:13:53Z

建議/可用

@@ Line 4: / Line 4: @@
 == 建議/可用 ==
 {{Gd}} [https://addons.mozilla.org/en-US/firefox/addon/xss-me/ XSS Me :: Add-ons for Firefox] 檢測正在瀏覽的網頁表單的 Cross-site scripting (XSS)、[https://addons.mozilla.org/en-us/firefox/addon/sql-inject-me/?src=userprofile SQL Inject Me :: Add-ons for Firefox] 檢測正在瀏覽的網頁表單的 SQL Injection
 * 公司/維護者: [https://addons.mozilla.org/en-US/firefox/user/security-compass/ Security Compass]
@@ Line 22: / Line 32: @@
 * 掃描對象:
 * 掃描報告內容:
 * 填寫個資申請: 不用

Unknown user: /* 建議/可用 */

2021-03-26T10:06:39Z

建議/可用

@@ Line 90: / Line 90: @@
 * 試用版限制:
 * 檔案掃毒: Eset 掃毒 ok
 * 掃描對象:
 * 掃描報告內容:

Unknown user: + SSL Server Test

2020-12-02T04:15:57Z

+ SSL Server Test

← Older revision		Revision as of 12:15, 2 December 2020
Line 250:		Line 250:
	</pre>		</pre>

	References
			== Related pages ==
			* [[Web_Ping#SSL_Server_Test \| SSL Server Test]]

			== References ==

	* [https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools Category:Vulnerability Scanning Tools - OWASP]		* [https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools Category:Vulnerability Scanning Tools - OWASP]
	* [http://www.networkworld.com/article/2176429/security/security-6-free-network-vulnerability-scanners.html 6 free network vulnerability scanners \| Network World]		* [http://www.networkworld.com/article/2176429/security/security-6-free-network-vulnerability-scanners.html 6 free network vulnerability scanners \| Network World]

Planetoid: /* 建議/可用 */

2018-11-29T10:43:40Z

建議/可用

← Older revision		Revision as of 18:43, 29 November 2018
Line 29:		Line 29:
	* 授權: [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Apache 2 License]		* 授權: [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Apache 2 License]
	* 試用版限制:		* 試用版限制:
	* 檔案掃毒: VirusTotal 掃描結果 [https://~~groups~~.~~google~~.com/~~forum~~/~~#!topic~~/~~zaproxy-develop~~/~~GT0_k6PkqjI~~ Win 版] ok		* 檔案掃毒: VirusTotal 掃描結果 [https://www.virustotal.com/zh-tw/file/e3243792525306731ae9eba0cc4697d289e54a58ac529da0c021f2c1ca109246/analysis/ Win 版] ok
	* 掃描對象:		* 掃描對象:
	* 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing		* 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing

Planetoid: /* 建議/可用 */

2018-11-29T10:41:32Z

建議/可用

← Older revision		Revision as of 18:41, 29 November 2018
Line 24:		Line 24:
	* 填寫個資申請: 不用		* 填寫個資申請: 不用

	[https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project OWASP Zed Attack Proxy Project] 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分 OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。		[https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project OWASP Zed Attack Proxy Project] (ZAP) v. 2.7.0 掃描報告內容包含 Cross-site scripting (XSS), SQL Injection 等部分 OWASP 項目。報告內容有標示漏洞[https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsAlerts 嚴重程度]。
	* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]		* 公司/維護者: [https://www.owasp.org/index.php/Main_Page OWASP]
	* 作業系統: {{Win}}, {{Linux}} & {{Mac}}		* 作業系統: {{Win}}, {{Linux}} & {{Mac}}
	* 授權: [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Apache 2 License]		* 授權: [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Apache 2 License]
	* 試用版限制:		* 試用版限制:
	* 檔案掃毒: VirusTotal 掃描結果 [https://~~www~~.~~virustotal~~.com/~~zh-tw~~/~~file~~/~~56f99b77c57cdb1e84a9404b589c1d443d52877ee456c02cc7eae25105c18ae5~~/~~analysis/ Mac~~ 版] ok, 其他版有問題[https://www.virustotal.com/zh-tw/file/4ac72657e88733a77d5686274a72dd62ce35fb196faa7f5775ee998277aa1564/analysis/][https://www.virustotal.com/zh-tw/file/c4ee3d515f517290f4f420e50e6056bbefce49395fb955ffca4e9b6bf5aa7072/analysis/][https://www.virustotal.com/zh-tw/file/6237f645d618cf2b2948e7befaa1274916f5da703f38169bb39f07ef21c0a3ae/analysis/]		* 檔案掃毒: VirusTotal 掃描結果 [https://groups.google.com/forum/#!topic/zaproxy-develop/GT0_k6PkqjI Win 版] ok
	* 掃描對象:		* 掃描對象:
	* 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing		* 掃描報告內容: 內容包含 X-Frame-Options header not set, Cross-Domain javascript source file inclusion, Cross-site scripting (XSS), SQL Injection, X-content-type-options header missing