: Re: [WEB SECURITY] open source web app scanners > > Zippy, > > There is good list of web app scanners on sectools.org [0] > You can try w3af [1] and arachni [2] > > [0] http://sectools.org/tag/web-scanners/ > [1] http://w3af.org > [2] http://arachni-scanner.com/ > > On 06/28/2012 04:40 AM, Zippy Zeppoli wrote: >> Hi List, >> I was wondering if anyone has come

+0000, MaXe wrote: > > I stumbled over this the other day: > http://www.securityaegis.com/web-application-testing-resources/ > > There is also a lot of tools mentioned on this page, including the most used generally.

_______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA > > WASC on Twitter > http://twitter.com/wascupdates > > websecurity@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo

And I'd like to have the web browsers outside visit my web > server directly (I mean the mapped address on my NAT,without the > help of a proxy that has a public IP,for bandwidth concern). Can I > achieve that with the help of PJNATH and just one or some STUN > servers? Is the usage of PJNATH limited to P2P applications?

________ The Web Security Mailing List WebSecurity RSS Feed http://www.webappsec.org/rss/websecurity.rss Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA WASC on Twitter http://twitter.com/wascupdates websecurity@lists.webappsec.org http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org _________

app depending on its specific components >> Build an attack tree or a threat table XLS, an example below >> *Injection* >> >> > > -- > > Regards, > > Gautam > > > _______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com

The APT malware uses a combination of >>>> Web 2.0 hacking techniques like CSRF and click-jacking to make calls >>>> to and access private-cloud infrastucture's web interfaces via >>>> legitimate private-cloud user's web browsers.

:* Re: [WEB SECURITY] open source web app scanners > > Zippy, > > There is good list of web app scanners on sectools.org [0] > You can try w3af [1] and arachni [2] > > [0] http://sectools.org/tag/web-scanners/ > [1] http://w3af.org > [2] http://arachni-scanner.com/ > > On 06/28/2012 04:40 AM, Zippy Zeppoli wrote: > > Hi List, > > I was wondering if anyone has

For more details about the new release please visit: http://www.arachni-scanner.com/blog/arachni-0-4-4-0-4-2-release/ Download page: http://www.arachni-scanner.com/download/ Homepage - http://www.arachni-scanner.com Blog - http://www.arachni-scanner.com/blog Documentation - https://github.com/Arachni/arachni/wiki Support

> > > Thanks in advance, > > Rgds, > Ram > > > > > _______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA > > WASC on Twitter > http://twitter.com/wascupdates > > websecurity@lists.webappsec.org