website auf SQL-Injection prüfen

[g17]

Security Scanner like Nessus für *nixe (free).
http://www.nessus.org/index2.html

Für Win kenne ich nur einen guten for free (Nessusengine)
http://www.tenablesecurity.com/newt.html
hat aber gegenüber der kommerziellen folgende Einschränkungen

NeWT licenses are available in two flavors named "NeWT" and "NeWT Pro".NeWT is available as a download to anyone with an Internet connection. A NeWT user can only scan their local subnet. For example, a NeWT user who had an IP address of 192.168.10.11 would be able to scan 192.168.10.0 through 192.168.10.255. Tenable has made NeWT available to the general public such that home users, small businesses, non-profit organizations and a host of others can now scan their networks for vulnerabilities. NeWT Pro is a commercially supported vulnerability scanning product for enterprise customers and consultants. NeWT Pro has no limitation on which IP addresses it can scan. It is also fully supported by Tenable Network Security. NeWT Pro costs $6000

Hier gibt es Online Tests (Free Trial)

http://www.securityspace.com/sspace/index.html


g17

Ps: wenn dir das nicht reicht, schicke mir halt eine PN