WebCruiser Web Security Scannerhttp://sec4app.com/download.htm

一個國外的SQL掃描工具，還不錯。

WebCruiser – Web Vulnerability Scanner, a compact but powerful web security scanning tool that will aid you in auditing your site! It has a Vulnerability Scanner and a series of security tools.

It can support scanning website as well as POC (Proof of concept) for web vulnerabilities: SQL Injection, Cross Site Scripting, XPath Injection etc. So, WebCruiser is also an automatic SQL injection tool, an XPath injection tool, and a Cross Site Scripting tool!

Key Features:

* Crawler(Site Directories And Files);

* Vulnerability Scanner: SQL Injection, Cross Site Scripting, XPath Injection etc.;

* SQL Injection Scanner;

* SQL Injection Tool: GET/Post/Cookie Injection POC(Proof of Concept);

* SQL Injection for SQL Server: PlainText/Union/Blind Injection;

* SQL Injection for MySQL: PlainText/Union/Blind Injection;

* SQL Injection for Oracle: PlainText/Union/Blind/CrossSite Injection;

* SQL Injection for DB2: Union/Blind Injection;

* SQL Injection for Access: Union/Blind Injection;

* Post Data Resend;

* Cross Site Scripting Scanner and POC;

* XPath Injection Scanner and POC;

* Auto Get Cookie From Web Browser For Authentication;

* Report Output.

<a href="http://sec4app.com/download.htm">Download WebCruiser – Web Vulnerability Scanner</a>

 本文轉自 simeon2005 51CTO部落格，原文連結:http://blog.51cto.com/simeon/404292