: For Windows platform I could recommend Acunetix Free OWASP developing and testing guides are awesome. However, I think there are no 100% good options. The best way (time expensive altough) would

@Lee4591628

For Windows platform I could recommend Acunetix Free

OWASP developing and testing guides are awesome.

However, I think there are no 100% good options. The best way (time expensive altough) would be using cheatsheets. I mean, all tools and frameworks I know just check for some commom faults like exploiting require/includes and trying some injections.

For a better security, you should also test HTTP protocol stuff, Poison Null Byte, Fault and Boundaries Injections, XSS, CSRF and SQL Injection. Because just ensure one point does not guarantee the others (and real attackers surely will explore all options).

Using XSS, CSRF, SQL Injection and HTTP codes, surely can enhance a lot your security checks.

Vote Up Vote Down

Login to post a comment!