> What I need is a web application that has known security issues. I would
> prefer one that was intentionally written to have scanners pointed to it
> for testing the scanners.
http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
http://www.foundstone.com/us/resources/proddesc/hacmebank.htm
http://hackme.ntobjectives.com/
Be aware that most of the tools out there have been tested against these
test sites already and will find most of their vulnerabilities. It's not
really a realistic evaluation of how they will fare against your site and
its applications. But it will definitely put high-severity findings on the
report.
PaulM
-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!
https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------
Received on Jul 11 2008
Intro
