Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I'm wondering is there any tool for measuring or testing the security of a website ?

I've written some ASP.NET web-app , So i would like measure the security of my own application and if there is any whole like sql-Injection or XSS , i could fix that .

Thank you

share|improve this question
add comment

migrated from superuser.com Jan 17 '11 at 23:28

This question came from our site for computer enthusiasts and power users.

3 Answers

up vote 1 down vote accepted

There's several good apps you can look at for this, some of them available for free.

Netsparker has a community edition that covers XSS and SQLi

Acunetix WVS also have a community edition that can review sites for XSS.

On top of that there's some free tools that you could use

skipfish is a free security scanner from a google researcher

W3AF is a a free web app. scanner

BTW if you've got more questions on the security side of things, there's a dedicated Stack Exchange site at security.stackexchange.com

share|improve this answer
add comment

http://cirt.net/nikto2

There are dozens of application testers for things like that. Above is Nikto a free tool to do just what you are asking for. Depending on the depth and breadth of your application you may want to consider bringing in some outside help to better assess it.

share|improve this answer
    
Nikto is a good tool looking for known issues in published apps and some other classes of problem, but it doesn't scan for SQL Injection or Cross site scripting in custom code. –  Rоry McCune Jan 21 '11 at 20:55
add comment

Great comments thus far. Armitage can also scan for web application exploits. A comprehensive maintained list can also be found here http://sectools.org/tag/web-scanners/

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.