Re: Help to Automate XSS and SQL

[Rémi LAURENT <cloud () madpowah org>]

Hello,

You can try tools like Acunetix (very expensive but powerfull) or wikto
for example. There is also Wapity which is a good free product but need to
install python.
Url : http://wapiti.sourceforge.net/

Have fun.

> Hello Friends,
>
>                Greetings of the day !! .. Recently I had carried out
> manual test with XSS and SQL. I have tried quite a lot of the
> variants.. but later on it was detected that it has XSS and SQL
> vulnerability.
>
> Since there are so many variants of XSS and SQL and cannot be tried of
> all those in a limited time span. What should I do to make sure that
> the site doesn't have XSS and SQL.
>
> Should I try with every SQL and XSS string. and use a automated brute
> force attack .. If yes .. can anyone suggest me some good tools that I
> can run from windows or browser ( similar to tamper data ,greasy
> monkey or any other windows tools ).
>
> Note : please don't suggest perl scripts or linux related scripts even
> though I would love to work upon :(  Coz this is a windows
> environment.
>
>
> Thanks in advance for sharing your experiences :)
>
> regards,
> Vinox


-- 
Rémi LAURENT
http://blog.madpowah.org