5-2web application vulnerability scanning

web Application vulnerability scanning

in the light of Web Application vulnerability scanning is actually that each scanner reads its own payload Splicing , And web Services interact , If the interaction is successful ,web The response from the server , Match the result response in our corresponding vulnerability scanner , Then it means that web Application point , Vulnerability

WEB Vulnerability scanner ：

1、AWVS

2、xray

3、Appscan

4、burpsuit

Each scanner has a different payload, Probably awvs scanning A Website , No loopholes found , This is the time ,xray When scanning ,A There are corresponding websites web Loophole , therefore , When we scan , Try to use two or more scanners , Do a vulnerability scan