5

I'm wondering is there any tool for measuring or testing the security of a website ?

I've written some ASP.NET web-app , So i would like measure the security of my own application and if there is any whole like sql-Injection or XSS , i could fix that .

Thank you

Improve this question
1

There's several good apps you can look at for this, some of them available for free.

Netsparker has a community edition that covers XSS and SQLi

Acunetix WVS also have a community edition that can review sites for XSS.

On top of that there's some free tools that you could use

skipfish is a free security scanner from a google researcher

W3AF is a a free web app. scanner

BTW if you've got more questions on the security side of things, there's a dedicated Stack Exchange site at security.stackexchange.com

Improve this answer
1

http://cirt.net/nikto2

There are dozens of application testers for things like that. Above is Nikto a free tool to do just what you are asking for. Depending on the depth and breadth of your application you may want to consider bringing in some outside help to better assess it.

Improve this answer
1
  • Nikto is a good tool looking for known issues in published apps and some other classes of problem, but it doesn't scan for SQL Injection or Cross site scripting in custom code. – Rory McCune Jan 21 '11 at 20:55
0

Great comments thus far. Armitage can also scan for web application exploits. A comprehensive maintained list can also be found here http://sectools.org/tag/web-scanners/

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.