11.7 Webserver Security Tools

Web Application Security Scanners: Syhunt Dynamic and N-Stalker Web Application Security Scanner

• Syhunt Dynamic: Syhunt Dynamic helps to automate web application security testing and guard organization's web infrastructure against various web application security threats.
• N-Stalker Web Application Security Scanner: N-Stalker is a WebApp Security Scanner to search for vulnerabilities such as SQL injection, XSS, and known attacks.

Web Server Security Scanners: Wikto and Acunetix Web Vulnerability Scanner

• Wikto: Wikto is a web server security scanner for windows:
  • Fuzzy logic error code checking
  • Google assisted directory mining
  • Back-end miner
  • Real time HTTP request/response monitoring
• Acunetix Web Vulnerability Scanner:
  • Acunetix WVS checks web applications for SQL injections, cross-site scripting, etc.
  • It includes advanced penetration testing tools to ease manual security audit processes, and also creates professional security audit and regulatory compliance reports.

Web Server Malware Infection Monitoring Tool: HackAlert

• HackAlert is a cloud-based service that identifies hidden zero-day malware and drive-by downloads in websites and online advertisements.

Web Server Malware Infection Monitoring Tool: QualysGuard Malware Detection

• QualysGuard Malware Detection Service scans websites for malware infections and threats.