Security testing tools for web applications

This article "Security testing tools for web applications" is still being written. If there are any incomplete parts, you are welcome to directly edit them. 這篇文章「Security testing tools for web applications」內容還在撰寫中，如果有不完整的部分，歡迎你直接動手修改。

Databases

• CVE "Identify, define, and catalog publicly disclosed cybersecurity vulnerabilities."
• CWE - Common Weakness Enumeration
• Nessus Plugin資料庫

Tools

• 資訊系統安全性漏洞的檢測工具
• SSL 憑證測試

Security header

• Analyse your HTTP response headers

---

Web site design and development process

• Information gathering: Research surveys
• Planning: Before you start to build a website, Content development strategy | Register domain name, Choose web hosting | Information architecture | Data model: Data type, Data flow | Documentation: Request For Proposal | Licensing
• Design: CSS tools, Free fonts, Free photos, Emoji & icons
• Testing & delivery: Usability test, check browser compatibility | Web testing | Speed up websites: Web Ping, Software acceptance test plan | Promote your web
• Maintenance: Site backup & restore test, Software update (OS patch or CMS security update)
• Need help? Community, I need inspiration, Web design glossary