Favorite tools for web app penetration testing

tedjames

Hey, new forum! What are your favorite tools for web app penetration testing? If I was limited to one tool, I'd choose Burp.

[Deleted User]

Depends on what i'm trying to do. For manipulating requests, Burp  For SQL Injection sqlmap For deserialization ysoserial 

tedjames

Thanks for the tip! I'll check out ysoserial.

Infosec_Sam

OpenVAS is something you might want to check out as well! I've used it a couple of times on small-scope projects and it had most of the tools I was looking for.

SteveLavoie

you could try Nikto too  

Severine

Metasploit is also a good option for web application penetration testing.