1–8 of 8 posts
So far I've been writing my own tests, but there is no question someone smarter than me will find a vulnerability. There are a number of great resources on the different types of exploits and how to fix them, but I havent found anything to tell me if I've implemented the solution correctly.
is probably one of the more common ones. nessus http://www.tenable.com/products/nessus looks for published vulnerabilities as well, but that would be more along the lines of using an exploitable pop3 daemon or having phpmyadmin visible from your site. Zmeu does some of those scans, but, will also try to do SQL injection.
tinfoil.com
A very helpful tool for testing: http://portswigger.net/burp/proxy.html
Take a look at https://www.owasp.org/ and review your source code for common vulnerabilities. A very helpful tool for testing: http://portswigger.net/burp/proxy.html
Also found a large PDF about testing with suggestions for tools https://www.owasp.org/images/5/56/OWASP_Testing_Guide_v3.pdf
More tools listed https://www.owasp.org/index.php/Appendix_A:_Testing_Tools