For this exercise, the example USES WebGoat, another tool from OWASP (see Resources).
对于本练习，例子中使用了WebGoat，这是出自owasp的另一个工具(参见参考资源)。
This report provides a great deal of information regarding each vulnerability detected, including a reference to the OWASP page that deals with the specific exploit.
该报告提供有关检测到的每个漏洞的大量信息，包括对处理特定exploit的OWASP页面的引用。
While the OWASP Top Ten list, presented by InfoQ, focuses on web application security risks, the CWE Top 25 covers a broader range of issues including the famous buffer overrun vulnerability.
曾在InfoQ中发布过owaspTop10列表，它所关注的是web应用程序的安全风险，而CWE的Top25的覆盖范围更广，包括著名的缓冲区溢出缺陷。
While the OWASP Top Ten list, presented by InfoQ, focuses on web application security risks, the CWE Top 25 covers a broader range of issues including the famous buffer overrun vulnerability.
曾在InfoQ中发布过owaspTop10列表，它所关注的是web应用程序的安全风险，而CWE的Top25的覆盖范围更广，包括著名的缓冲区溢出缺陷。
应用推荐