RE: good database testing tools to guard against SQL injection for Microsoft, Oracle?

["Pitts, Christopher C." <Christopher.Pitts () HaverstickConsulting com>]

It's not the best in the world, but as far as OPEN tools go, take a look at datathief.





-----Original Message-----
From:   Earl.Perkins () metagroup com [mailto:Earl.Perkins () metagroup com]
Sent:   Mon 5/10/2004 11:54 AM
To:     webappsec () securityfocus com
Cc:     
Subject:        good database testing tools to guard against SQL injection for Microsoft, Oracle?
does anyone have recommendations for good database testing tools
to spot and correct potential exploitation opportunities for SQL
injection attacks in Microsoft and Oracle database environments?
thanks.

Earl L. Perkins
Vice President, Security & Risk Strategies
Technology Research Services
META Group, Inc.     http://www.metagroup.com
earl.perkins () metagroup com
Voice: 504-362-0291   Fax: 925-889-2523

META Group --- Return On Intelligence*
=========================
*A service mark of META Group, Inc.





-----------------------------------------------------------------
                       METAmorphosis 2004
META Group's 15th Annual Forum for Meeting Business and IT Change

 "The Adaptive Organization: Building Value by Remodeling for IT
                          Flexibility"
                 http://www.metagroup.com/mm2004

                         March-May 2004
     San Diego - Chicago - Barcelona - Sydney - Johannesburg
-----------------------------------------------------------------