What tools do you use for vulnerability scanning?

Question

What are your favorite tools for checking for vulnerabilities in websites?

Answer 1

I've used Nessus before. It takes a bit to setup, but has a pretty comprehensive set of tests.

Answer 2

nmap is great for giving you the ports that are open and what is running on them

Answer 3

• HTTPrint
• Nessus (which, if installed on linux, typically has nmap as a port mapper)
• Qualys
• MetaSploit
• Fiddler
• WireShark

Answer 4

It's not free, but McAfee Secure does an excellent job and provides very detailed reporting.

Answer 5

hping

Answer 6

Check insecure Dot Org... and web scanner There are lots of great security tools there. Some are open source, other are commercial.. nikto praros proxy web scarab web inspect burpsuit whisker wikto acunetix wvs watchfire appscan n-Stealth

Answer 7

WebInspect is pretty good, but pricey. It takes a lot of handholding as well, not a lot of automated use.

Answer 8

I suggest you to use a commercial web application security scanner.A list of WASS : http://www.webscanners.net/webscanners/index.html

Answer 9

i prefer nessus as wonderful tool that is easy to use