Vega: An Open Source Platform to Test the Security of Web Application

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux, OS X, and Windows.

It includes an automated scanner for quick tests and an intercepting proxy for tactical inspection. Vega can be extended using a powerful API in the language of the web: Javascript.

Vega was developed by Subgraph in Montreal.

Core Features:

• Website Crawler
• Content Analysis
• Intercepting Proxy
• SSL MITM
• Automated Crawler and Vulnerability Scanner
• Consistent UI
• Extensibility through a Powerful Javascript Module API
• Customizable alerts
• Database and Shared Data Model

Modules Available:

• Cross Site Scripting (XSS)
• SQL Injection
• Directory Traversal
• URL Injection
• Error Detection
• File Uploads
• Sensitive Data Discovery

Download Vega

Links for binary packages built for various platforms are listed below:

Mac OS X 32-bit Intel
Mac OS X 64-bit Intel

Linux GTK 32-bit Intel
Linux GTK 64-bit Intel

Microsoft Windows 32-bit Intel
Microsoft Windows 64-bit Intel

Read More About Vega