Penetration Testing mailing list archives

Re: Checking for SQL Injection


From: Glenn Wilkinson <glenn () sensepost com>
Date: Fri, 12 Sep 2008 21:45:40 +0200

And if you like Nikto, you should def check out Wikto :)

www.sensepost.com/research/wikto/

david lodge wrote:
You can try one of them: W3AF, Nikto, Accunetix.
W3AF and Nikto are FREE but Accunetix is not!

One note here - Nikto isn't a SQL Injection testing tool - it scans
web servers for known vulnerabilities; not the content of said
servers.

dave
(current maintainer of Nikto)

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


Current thread: