('binary' encoding is not supported, stored as-is) In-Reply-To: <017c01c34af6$8fa39ae0$6401a8c0at_private> This is a relatively new commercial tool used for just that purpose. It's has a nice flexible front end and can be configured with just about any type of attack you might want to try. It's called WebInspect by SPI Dynamics. http://www.spidynamics.com They allow a download of the product for testing and will probably grant a 30 day temp key. --------------------------------------------------------------------------- Your network Firewall and IDS products do not prevent Web application exploits - the most common form of online attack - resulting in Web defacement, data theft, sabotage and fraud. KaVaDo is the first and only company that provides a complete and an integrated suite of Web application security products, allowing you to assess your entire environment, automatically set positive security policies and maintain it without compromising business performance. For more information on KaVaDo and to download a FREE white paper on Web applications - security policy automation, please visit: http://www.kavado.com/ad.htm ----------------------------------------------------------------------------
This archive was generated by hypermail 2b30 : Tue Jul 15 2003 - 11:47:56 PDT