owasp

We will use a range of tools to discover application failures. Github : https://github.com/samglish/web_exploitation_scanning Example of tools that we will use. Nikto Sslscan Sslyze OWASP Zed Attack Proxy(ZAP) BurpSuite Sqlmap bare hand analysis - > CSRF Scripting - > Python - > validation of command injections (HTTP,ICMP) 1. Nikto Terminal nikto -host google.com -port 443 -ssl OUTPUT - Nikto v2.1.6 --------------------------------------------------------------------------- + Target IP: 142.251.135.110 + Target Hostname: google.com + Target Port: 443 --------------------------------------------------------------------------- + SSL Info: Subject: /CN=*.google.com Ciphers: TLS_AES_256_GCM_SHA384 Issuer: /C=US/O=Google Trust Services/CN=WR2 + Start Time: 2024-09-09 14:01:05 (GMT1) --------------------------------------------------------------------------- + Server: gws + X-XSS-Protection header has been…