RE: Web Application Source Vulnerability Scanners

[Vitor Ventura <vventura () sia pt>]

If I understand this comment correctly, them what Rafael is looking for is
some kind of code analizer for the languase in which the web aplication is
made.
For instance I'm currently looking for an ASP(vbs) security code analizer,
just like rats or the.other.one.that.I.cant.remenber.name . I haven't find
anything not free or comercial tool, that analizes visual basic scripts and
alerts me about security issues on the code.

Regards
Vitor Ventura

-----Original Message-----
From: Kevin Spett [mailto:kspett () spidynamics com]
Sent: segunda-feira, 10 de Março de 2003 16:05
To: Javier Fernandez-Sanguino; Ory Segal
Cc: webappsec () securityfocus com
Subject: Re: Web Application Source Vulnerability Scanners


> However, it's not a "web application _Source_ vulnerability scanner".

I could be wrong here, but from reading the original message I think that
the subject line mistakenly missing the word "open" before "source".



Kevin Spett
SPI Labs