Welcome to the Research/Projects area.

All information on this page is provided as is and is the result of vulnerability research done by WebSec.org.
If you would like to see research done on certain products or SW-Packages please contact martin@websec.org.

The Projects

Links/Remarks

Automated scanning for vulnerabilities in web applications

No papers and tools availiable yet. Work is in progress...

Collection of STATIC Web-Vulnerabilities

Find a TXT-Version here
Find a HTML-Version here

Blade (A WebApp Test-Tool)

Semi-intelligent WebApplication Test-Tool/Crawler/Browser/Manipulator written in Java (Delayd)

APJV-Raw

Query apjv-protocol driven servers directly / Perl/C (Delayd due to protocol-changes)