WebApp Sec mailing list archives

ExploitMe Series


From: nish () securitycompass com
Date: 27 Nov 2007 19:05:49 -0000

Hi,

Security Compass is proud to announce the release of the first two tools in its Exploit Me series of application 
penetration testing tools for Mozilla FireFox: XSS-Me and SQL Inject-Me. 

Currently in their beta release stage, these open source (GPL v3) FireFox plug-ins search through web applications for 
vulnerable visible and hidden form fields to perform input validation attacks.  

We believe that these tools will be invaluable not only to penetration testers and QA testers, but also to developers 
as a light-weight method to check for common application security vulnerabilities during the development process.  

Please visit http://www.securitycompass.com/ to download these plugins.  

As the tool is still the beta stage, we appreciate feedback on existing functionality, desired features, and bugs 
encountered. Please send any feedback to tools () securitycompass com and bugs to bugs () securitycompass com. 


Thank you for your interest and we hope you are able to benefit from this new tool!

Kind regards,


Nish.

-------------------------------------------------------------------------
Sponsored by: Watchfire

Cross-Site Scripting (XSS) is one of the most common application-level 
attacks that hackers use to sneak into web applications today. This 
whitepaper will discuss how traditional XSS attacks are performed, how to 
secure your site against these attacks and check if your site is protected. 
Cross-Site Scripting Explained - Download this whitepaper today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=701700000009405
-------------------------------------------------------------------------


Current thread: