---
title: "Alternative tools to perform the example attacks from our Intro to AppSec course - Cybr"
description: "Alternative tools to perform the example attacks from our Intro to AppSec course: a thread from the Introduction to Application Security (AppSec) forum on Cybr, with 0 replies. Read-only archive."
url: https://cybr.com/forums/topic/alternative-tools-to-perform-the-example-attacks-from-our-intro-to-appsec-course/
---

Topic

# Alternative tools to perform the example attacks from our Intro to AppSec course

0 replies

**Archived.** These forums are read-only. The conversation continues on [Discord](https://cybr.com/discord/).

1. Christophe

   Jun 29, 2020

   The example brute force attacks in the Intro to AppSec course were carried out with a tool called Hydra, while the SQL injections were carried out manually and with SQLMap, and finally, the XSS attacks were performed manually.

   There are other available tools to gather information and to prod defenses. Two popular ones are:

   - OWASP ZAP
   - Burp Suite

   Here's a tutorial from a Cybr student, [@sechvn](https://cybr.com/members/sechvn/) , on [how to install and configure Burp Suite in minutes for pentesting](https://cybr.com/cybersecurity-fundamentals-archives/install-and-use-burp-suite-in-minutes-for-pentesting/).

   Here's [more information on OWASP ZAP](https://www.zaproxy.org/).

[< Back to Introduction to Application Security (AppSec)](https://cybr.com/forums/forum/introduction-to-application-security/)