Mark: Acunetix,一个安全工具,被有些人用来做垃圾表单提交机器

有时会被垃圾表单提交机器狂发垃圾,甚至造成邮件拥堵。今天注意到其表单提交里有一项填写的是 Acunetix ,本以为是下什么组织还是什么,随手google了一下,原来是一个安全工具,其官方网站,http://www.acunetix.com/ 上有如下的说明,先mark一下,研究研究

Website security is possibly today's most overlooked aspect of securing the enterprise and should be a priority in any organization. Hackers are concentrating their efforts on web-based applications - shopping carts, forms, login pages, dynamic content, etc. Web applications are accessible 24 hours a day, 7 days a week and control valuable data since they often have direct access to back-end data such as customer databases.

Firewalls, SSL and Locked-Down Servers are Futile Against Web Application Hacking

Any defence at network security level will provide no protection against web application attacks since they are launched on port 80 - which has to remain open. In addition, web applications are often tailor-made therefore tested less than off-the-shelf software and are more likely to have undiscovered vulnerabilities. Acunetix Web Vulnerability Scanner automatically checks your web applications for SQL Injection, XSS & other web vulnerabilities.

发表评论

电子邮件地址不会被公开。

This site uses Akismet to reduce spam. Learn how your comment data is processed.