Re: Web Application Source Vulnerability Scanners

SPIKE Proxy is the best one *I* know of. :>

Hit packetstorm or wiretapped.com to download it for Windows or Unix (it's Python and GPL) until Immunity's connectivity recovers from Verizon.

Dave Aitel
Network Support
Immunity, Inc.
www.immunitysec.com

• Original Message ----- From: "Rosado, Rafael (Rafael)" <rarosado@lucent.com> To: <webappsec@securityfocus.com>; <cisspforum@yahoogroups.com> Sent: Friday, February 28, 2003 8:26 AM Subject: Web Application Source Vulnerability Scanners

> Does anyone know of open source vulnerability scanners in the Web
of
> the most common commercial tools (AppScan from Sanctum and WebInspect from
(OWASP)
> has started the development of an open source Weeb Application
Vulnerability
> scanner called WebScarab, however, it is in the early stages of
development.
>
> Any assistance on indentifying specific open source tools (names and web
action
> in reliance on the contents of this electronically mailed information is
Received on Sat Mar 1 01:43:14 2003