Scribd
Upload
21 views

Module6 5

This document discusses vulnerability scanning tools that can scan websites locally or remotely to detect known issues. It provides an overview of example scanner user interfaces and categories of test vectors used to detect vulnerabilities. Specific vulnerabilities that can be detected include information leaks, session issues, cross-site scripting, SQL injection, and cross-site request forgery in popular content management systems like Drupal, phpBB2 and WordPress.

Uploaded by

Harpreet Singh
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
21 views

Module6 5

This document discusses vulnerability scanning tools that can scan websites locally or remotely to detect known issues. It provides an overview of example scanner user interfaces and categories of test vectors used to detect vulnerabilities. Specific vulnerabilities that can be detected include information leaks, session issues, cross-site scripting, SQL injection, and cross-site request forgery in popular content management systems like Drupal, phpBB2 and WordPress.

Uploaded by

Harpreet Singh
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 6

Module 6.

5
Finding vulnerabilities
Survey of Web Vulnerability
Tools
LocalRemote

>$100K total retail price


Example scanner UI
Test Vectors By Category

Test Vector Percentage Distribution


Detecting Known
Vulnerabilities
Vulnerabilities for
previous versions of Drupal, phpBB2, and WordPress

Good: Info leak, Session


Decent: XSS/SQLI
Poor: XCS, CSRF (low vector count?)
Vulnerability Detection

You might also like