AppSec and Vulnerability Analysis - mtcf987/Informational-Dives GitHub Wiki

  • Web app scanning and exploitation with Burp Suite, w3af, OWASP ZAP
  • CVE, CVSS
  • Vulnerability scanning tools, e.g. Nessus
  • Network and application vulnerability scans and assessments
  • Scanner output handling, false positives, prioritization
  • Vulnerability risk rating
  • Vulnerability types and concepts