Vulnerability Scanner Software

biko · 2008-02-28 12:45:03

I today use NTO spider to scan my sites but would like to add another tool. Does anyone have recommendations? Free if possible but also tools that cost money is ok.

28-02-2008 12:45PM

#1

biko

Registered Users, Registered Users 2 Posts: 81,060 ✭✭✭✭

Join Date: July 2005

Posts: 75468

I today use NTO spider to scan my sites but would like to add another tool.
Does anyone have recommendations? Free if possible but also tools that cost money is ok.

0

Comments

#2 28-02-2008 12:50PM

aidan_walsh

Closed Accounts Posts: 17,208 ✭✭✭✭

Join Date: February 2003

Posts: 15589

Are you specifically looking for vulnerabilites in just your code, or in the server too?

0
#3 28-02-2008 01:12PM

mneylon

Registered Users, Registered Users 2 Posts: 7,742 ✭✭✭

Join Date: April 2001

Posts: 7234

Most of the free / cheap server scanners are a bit dumb as they go by version numbers ONLY and ignore the fact that RedHat and other vendors release backport updates

Blog | Tweets

0
#4 28-02-2008 04:51PM

biko

Registered Users, Registered Users 2 Posts: 81,060 ✭✭✭✭

Join Date: July 2005

Posts: 75468

Well, I'd be looking at server issues too but generally code issues. Attack scripts, SQL injections et cetera.
Servers are Win 2003 SP2 and code is written by developers on site.

I'm thinking tools like SARA, SAINT, the old SATAN...

0