3. Audit techniques and tools

We will not be presenting the tools already described in the article "Safety audits: methodologies, tools and feedback". We therefore invite the reader to refer to them. Indeed, the principles remain the same: information gathering, social engineering, discovery of application entry points...

In this chapter, we present the most commonly used tools for finding and exploiting security flaws in Web applications. We'll be focusing on the tools themselves, since they implement techniques that are commonly used manually by auditors.

Finally, we'll take a closer look at some of the tools commonly used in Web security audits.