dropfaith Posted October 25, 2008 Share Posted October 25, 2008 Are there any good free programs i can download to test this stuff on my own i know xss i can use Strings like below but how do i test sql? ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> Quote Link to comment Share on other sites More sharing options...
waynew Posted October 26, 2008 Share Posted October 26, 2008 Download the freebie version of Acunetix Web Vulnerability Scanner. That will rape your apps for XSS holes. Download SQL Inject Me as a Firefox add-on for injection. It's free too and allows you to import strings. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.