Web Application Scanners

• Nikto2

• Arachni scanner

• Known as interception proxies.

  • Burp Suite

    • Intruder - exploits

    • Repeater – fuzz

    • Sequencer – analyze web server responses

  • OWASP ZAP web proxy

    • Scans for vulnerabilities for free. Paid for burp