Tools / Application Security Interview Questions
Explain OWASP WebGoat and WebScarab.
OWASP WebGoat is a deliberately insecure application that allows interested developers just like you to test vulnerabilities commonly found in Java-based applications that use common and popular open-source components.
OWASP WebScarab is a framework for evaluating HTTP/HTTPS traffic. It performs a number of tasks, including fragment analysis, observing browser and server traffic, session ID analysis, manual intercept, and locating new URLs on each page browsed. WebScarab is a web security application testing tool. It serves as a proxy that intercepts and allows people to alter web browser web requests (both HTTP and HTTPS) and web server replies.
More Related questions...
