Penetration Testing: Re: Checking for SQL Injection

["Jorge L. Vazquez" <jlvazquez825 () gmail com>]

Glenn Wilkinson wrote:
> And if you like Nikto, you should def check out Wikto :)
>
> www.sensepost.com/research/wikto/
>
> david lodge wrote:
> > > You can try one of them: W3AF, Nikto, Accunetix.
> > > W3AF and Nikto are FREE but Accunetix is not!
> > >     
> > One note here - Nikto isn't a SQL Injection testing tool - it scans
> > web servers for known vulnerabilities; not the content of said
> > servers.
> >
> > dave
> > (current maintainer of Nikto)
> >   
> ------------------------------------------------------------------------
> This list is sponsored by: Cenzic
>
> Top 5 Common Mistakes in Securing Web Applications
> Get 45 Min Video and PPT Slides
>
> www.cenzic.com/landing/securityfocus/hackinar
> ------------------------------------------------------------------------
what he's trying to say is that nikto won't check the web application
for vuln, but the web server itself

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------