WEB安全检查工具

最新推荐文章于 2023-04-20 11:08:54 发布

原创最新推荐文章于 2023-04-20 11:08:54 发布 · 533 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#web #scripting #security #debugging #工具 #sql

本文介绍使用WebScarab和Fiddler进行SQL注入及跨站脚本攻击的检测方法。提供了通过插件增强Fiddler的安全分析能力的方式，并详细说明了如何利用WebScarab测试SQL注入漏洞。此外还分享了SQL注入技巧总结及相关的开源工具资源。

1.Detection of SQL Injection and Cross-site Scripting Attacks

WebScarab

2.Fiddler

the previous is used more for security analysis and testing and the latter for debugging and troubleshooting.

3.some Vulnerability / Security Analysis to Fiddler through add-ins

http://msdn.microsoft.com/en-us/library/ms998364.aspx#paght000027_step2

4.Testing for SQL Injection with WebScarab

http://www.owasp.org/index.php/Testing_for_SQL_Injection_%28OWASP-DV-005%29

5.SQL Injection cheat sheet
http://ha.ckers.org/sqlinjection/

SQL Power Injector开发源代码下载及文档工具

http://www.sqlpowerinjector.com/download.htm

sqlmap开源工具及代码
http://sqlmap.sourceforge.net/