Finding SQL Injection with Scrawlr

home
security
view story

1 Kicks

Finding SQL Injection with Scrawlr(communities.hp.com)

submitted by Robr(190) 3 years, 11 months ago

Microsoft worked with the HP Web Security Research group to release the Scrawlr tool. The tool will crawl a website, simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities. This will allow an IT/DB admin to easily find vulnerabilities similar to the ones that have been used to compromise sites in recent attacks. No source code is required to run this tool. From a starting URL, the tool recursively crawls that URL in order to build up a site tree that will be then analyzed for SQL injection vulnerabilities.

add a comment |category: Security |Views: 19
Tweet