- [Tutor] Now in the previous lessons
you actually learn about many different tools,
that you can actually use to find vulnerabilities right.
There're many different scanners,
both open-source and commercial scanners,
as well as cloud services,
that you can actually use to find vulnerabilities
in a network or device right.
Now here some of the most popular ones.
This is actually just a refresher,
as I mention to you.
You actually have OpenVAS
which is an open-source vulnerability scanner.
You have Nessus from Tenable.
Nexpose from Rapid7, Qualys.
You also learn about SQL injection.
So there's a tool that you actually use
or you saw, before called SQL map,
to find SQL injection vulnerabilities.
You also have Nikto.
In the case of web applications,
and this actually allows you to scan a web application
and find vulnerabilities.
You also have Burp Suite.
And with Burp, there are two versions.
Of course, there's a free commercial,
free community edition,
and also the commercial version, right.
The commercial version of Burp Suite
allows you to actually do automated scanning.
Now you also have the OWASP Zed Attack Proxy
or ZAP for short,
that allows you to also do, some you know,
scanning against web applications.
You also have the w3af tool and Sparta as well.
Those are all tools
that are used for a vulnerability scanning.