Liteweight XSS and SQL Injection testing tools

Sometimes it is nice to have a quick tool that will scan a site for basic XSS or SQL Injection vulnerabilities. It is even nicer if you don’t have to go through some long drawn out setup procedure just to see if a field has any tasty morsels to chew on. Enter a free suite of tools call Exploit-Me by
Security Compass – Application Security.

The suite currently consists of two tools:

  1. XSS-Me – a tool to test for Cross-Site Scripting vulnerablities
  2. SQL Inject-Me – a tool to test for SQL Injection vulnerabilitie

The beauty of the Exploit-Me suite is the tools are Firefox add-ons and don’t require a proxy.Install the add-on and when you are on a page you want to test, just open the sidebar and go to town.

Take a peek. I think you’ll like them.

-Kevin Riggins

This entry was posted on Sunday, March 30th, 2008 at 5:22 pm and is filed under Web App Testing. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

One Response to “Liteweight XSS and SQL Injection testing tools”

  1. Liteweight XSS and SQL Injection testing tools | SQL Injection Says:
    April 4, 2008 at 4:59 pm

    [...] Read the original here: Liteweight XSS and SQL Injection testing tools [...]

Comments are closed.