# 鬼仔：之前有收藏这个地址，今天又在 包子 那里看到，包子给起了一个名字，叫 Web安全工具大汇聚 。
原文地址 OWASP的wiki里
Monday, January 29, 2007 4:02 PM 828569600 AOC_Labrat-ALPHA-0010.iso - http://www.packetfocus.com/hackos/
DVL (Damn Vulnerable Linux) - http://www.damnvulnerablelinux.org/
# 鬼仔：在 包子 那里看到的。
Web Application Vulnerability Scanners are tools designed to automatically scan web applications for potential vulnerabilities. These tools differ from general vulnerability assessment tools in that they do not perform a broad range of checks on a myriad of software and hardware. Instead, they perform other checks, such as potential field manipulation and cookie poisoning, which allows a more focused assessment of web applications by exposing vulnerabilities of which standard VA tools are unaware.
Author: jianxin [80sec]
EMail: jianxin#80sec.com
Site: http://www.80sec.com
Date: 2009-3-28
From: http://www.80sec.com/release/webapp-rootkit.txt
[ 目录 ]
0×00 为什么我们会有这个想法
0×01 web应用程序中后门的基本思想
0×02 实际应用中的一些例子