Re: web application scanning

[Paul Lepkowski <peliso () RIT EDU>]

W3AF is an open source web application scanner.  The links are at:

http://w3af.sourceforge.net/

https://community.rapid7.com/community/open_source/w3af



Paul Lepkowski, CISSP, GIAC-GPEN
RIT Information Security Office
Enterprise Information Security Lead Engineer
Staff Council Representative
 
Rochester Institute of Technology
Ross 10-A200
151 Lomb Memorial Drive
Rochester, NY 14623
(585) 475-6972
paul.lepkowski () rit edu
 
CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity 
to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any 
copies of this information.


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Michael 
Sheinberg
Sent: Tuesday, February 07, 2012 2:45 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] web application scanning

Hello,

Does anyone here have any recommendations for tools (preferably
open-source) that will scan web-servers for vulnerable application frameworks + plug-ins?

Stuff like looking for out-of-date Drupal, Joomla, etc. Obviously I can find some of these tools with Google on my own, 
just curious if anyone has any positive experience with any in particular.

Thanks!
--
-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
Michael Sheinberg
Network Security Administrator, CETS

School of Engineering and Applied Science -~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~