We make a product called WebInspect which can be used to find both known and
unknown issues of all types at the web application layer, including buffer
overflows and parameter sanitization issues. It is also extremely
extensible and lets you write checks that can do just about anything,
including using OS and third-party APIs. I'm not going to bother reciting
pages upon pages of marketting materials about features here, so if you want
to know more, just check it out. You can get a free trial download at
http://www.spidynamics.com/download.html. BTW, a similar question was posted
on pen-test yesterday... you might want to look at that thread too.

 Kevin Spett
SPI Labs
http://www.spidynamics.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]