Understanding Application Vulnerabilities

Question 1

Burp Suite

Answer 1

A proprietary interception proxy and web application assessment tool.

Question 2

Zed Attack Proxy(ZAP)

Answer 2

An open-source interception proxy and web application assessment tool.

Question 3

Nikto

Answer 3

Vulnerability scanner that can be used to identify known web server vulnerabilities and misconfigurations, identify web applications running on a server, and identify potential known vulnerabilities in those web applications.

Question 4

Arachni

Answer 4

An open-source web application scanner.

Question 5

Application Debugger

Answer 5

tool is used to look “inside” of binaries to reveal how they work at an instruction-by-instruction level

Question 6

ScoutSuite

Answer 6

An open-source cloud vulnerability scanner designed for AWS, Azure, and GCP auditing.

Question 7

Prowler

Answer 7

An open-source cloud vulnerability scanner designed for AWS auditing

Question 8

Pacu

Answer 8

An open-source cloud penetration testing framework.