Security Basics
how to find vulnerabilities in a freeware software Oct 25 2013 06:41AM
shivaone gmail com (3 replies)
Re: how to find vulnerabilities in a freeware software Oct 25 2013 01:48PM
Manolis Mavrofidis (mmavrofides gmail com)
Re: how to find vulnerabilities in a freeware software Oct 25 2013 08:41AM
psiinon (psiinon gmail com)
Hi Shiva,

What sort of applications are you talking about?
And written in what languages?

As you have access to the source you can use static source code
analysis tools, but which ones will depend on the languages used.

If they are web applications then you can also use web application
vulnerability scanners.
There are lots of those, but not too surprisingly I'd recommend OWASP
ZAP: https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
(I'm the ZAP project lead)

Cheers,

Simon

(resent as plain text;)

On Fri, Oct 25, 2013 at 7:41 AM, <shivaone (at) gmail (dot) com [email concealed]> wrote:
> Hi Team,
>
>
> Please help me out in identifying the tool which will capture vulnerabilities in a freeware/Shareware/ Open source applications
>
>
> Regard's
>
> Shiva
>
> ------------------------------------------------------------------------

> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
> ------------------------------------------------------------------------

>

--
OWASP ZAP Project leader

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]
Re: how to find vulnerabilities in a freeware software Oct 25 2013 08:34AM
Robert Larsen (robert the-playground dk)


 

Privacy Statement
Copyright 2010, SecurityFocus