The moment you start diving deep into web security, your live will change forever. Possible vulnerabilities appear everywhere in your web application and you don’t know where to start.
So here are some free security tools/sites that help you on the right track:
- OWASP web site (https://www.owasp.org/index.php/Main_Page)
The Open Web Application Security Project (OWASP) is a 501c3 not-for-profit worldwide
charitable organization focused on improving the security of application
software. In their web site, you almost could find every piece of information
regarding security.
- Microsoft Security Development Lifecycle (http://www.microsoft.com/security/sdl/default.aspx)
A practical process we could follow to make our software more secure.
Burp Suite is an integrated platform for performing security testing of web applications. Its
various tools work seamlessly together to support the entire testing process,
from initial mapping and analysis of an application's attack surface, through
to finding and exploiting security vulnerabilities.
DOMinator is a Firefox based software for analysis and identification of DOM Based Cross Site
Scripting issues (DOMXss).
- Dom Snitch (http://googleonlinesecurity.blogspot.com/2011/06/introducing-dom-snitch-our-passive-in.html)
Dom Snitch is a Chrome based software for analysis and identification of DOM Based Cross Site
Scripting issues (DOMXss).
Web Application Configuration Analyzer (WACA) analyzes server configuration for security best practices
related to General Windows, IIS, ASP.net and SQL server settings.
CAT.net is a binary code analysis tool that
helps identify common variants of certain prevailing vulnerabilities that can
give rise to common attack vectors such as Cross-Site Scripting (XSS), SQL
Injection and XPath Injection