Comments on: Scrawlr – Scanner for SQL Injection

By: anonymous

anonymous — Thu, 27 May 2010 14:45:45 +0000

WebCruiser - Web Vulnerability Scanner

WebCruiser - Web Vulnerability Scanner, a compact but powerful web security scanning tool that will aid you in auditing your site! It has a Vulnerability Scanner and a series of security tools.

It can support scanning website as well as POC( Prooving of concept) for web vulnerabilities: SQL Injection, Cross Site Scripting, XPath Injection etc. So, WebCruiser is also an automatic SQL injection tool, a XPath injection tool, and a Cross Site Scripting tool!

Function:
* Crawler(Site Directories And Files);
* Vulnerability Scanner(SQL Injection, Cross Site Scripting, XPath Injection etc.);
* POC(Proof of Concept): SQL Injection, Cross Site Scripting, XPath Injection etc.;
* GET/Post/Cookie Injection;
* SQL Server: PlainText/Union/Blind Injection;
* MySQL/DB2/Access: Union/Blind Injection;
* Oracle: Union/Blind/CrossSite Injection;
* Post Data Resend;
* Administration Entrance Search;
* Time Delay For Search Injection;
* Auto Get Cookie From Web Browser For Authentication;
* Report Output.

System Requirement: Windows with .Net Framework 2.0 or higher

http://sec4app.com/

http://websecurityscanner.blogspot.com/

By: Mike

Mike — Wed, 16 Jul 2008 19:13:44 +0000

Nice post, I think I am going to have to recommend this product to my host who was recently hacked and injected.

Thanks!

Mike

instant host, domain name and whois search tool

By: Henry

Henry — Mon, 30 Jun 2008 08:43:57 +0000

We tested this tool against our servers with dotDefender, no attack could go through.
The dotdefender is a great sql injection blocker tool. Sql Injection attacks are not the only attacks that it blocks, there are many more.
You can check and download their product for 30 days evaluation. we tested it and very happy with the significantly decreased number of attacks on our production servers.

By: Anuj Seth

Anuj Seth — Sun, 29 Jun 2008 08:35:49 +0000

Nice one! Thanks for the tip…