RE: Vulnerability scanner for SQL injection, HTML injection- free or commercial ?

From: Harbar, Spencer (spencer.harbar_at_dns.co.uk)
Date: 09/23/03

  • Next message: Erik Anderson: "RE: Vulnerability scanner for SQL injection, HTML injection- free or commercial ?" 
    Date: Tue, 23 Sep 2003 16:17:01 +0100
To: "Milind Nanal" <milindyn@rolta.com>, <focus-ms@securityfocus.com>

    Check out ScanDo from www.kavado.com, WebInspect from
    www.spidynamics.com and AppScan from www.sanctum.com

    hth
    Spence
     

    -----Original Message-----
    From: Milind Nanal [mailto:milindyn@rolta.com]
    Sent: 19 September 2003 06:31
    To: focus-ms@securityfocus.com
    Subject: Vulnerability scanner for SQL injection, HTML injection- free
    or commercial ?

    Hi,

    Can anyone please tell me information about any vulnerability scanner
    (free or trial version of commercial scanner) which can scan SQL
    injection , HTML injection of IIS web server running with MS sql 2000 as
    a backend database.

    I get many document on the internet which tell me few default techniques
    of SQL injection & trying out those to carry out SQL injection test. I
    am looking out for ready made scanner which has a set of inbuilt
    commands to carry out SQL , HTML injection attack & give a report ,
    recommendations to solve the problem.

    Quick response is appreciated

    Regards,

    Milind

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------------------------
This e-mail was checked and validated by the dns email content management service.
For information on how to improve email management for your organisation, please contact sales@dns.co.uk
---------------------------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Erik Anderson: "RE: Vulnerability scanner for SQL injection, HTML injection- free or commercial ?"

    Relevant Pages