WebCruiser

WebCruiser - Web Vulnerability Scanner V2.5.1

WebCruiser, Web Vulnerability Scanner, SQL Injection Scanner

WebCruiser - Web Vulnerability Scanner, an effective and powerful web penetration testing tool that will aid you in auditing your website! It has a Vulnerability Scanner and a series of security tools.

It can support scanning website as well as POC (Proof of concept) for web vulnerabilities: SQL Injection, Cross Site Scripting, XPath Injection etc. So, WebCruiser is also an automatic SQL injection tool, an XPath injection tool, and a Cross Site Scripting tool!

Key Features:
* Crawler(Site Directories And Files);
* Vulnerability Scanner: SQL Injection, Cross Site Scripting, XPath Injection etc.;
* SQL Injection Scanner;
* SQL Injection Tool: GET/Post/Cookie Injection POC(Proof of Concept);
* SQL Injection for SQL Server: PlainText/Union/Blind Injection;
* SQL Injection for MySQL: PlainText/Union/Blind Injection;
* SQL Injection for Oracle: PlainText/Union/Blind/CrossSite Injection;
* SQL Injection for DB2: Union/Blind Injection;
* SQL Injection for Access: Union/Blind Injection;
* Post Data Resend;
* Cross Site Scripting Scanner and POC;
* XPath Injection Scanner and POC;
* Auto Get Cookie From Web Browser For Authentication;
* Report Output.

System Requirement: Windows 7\Vista, or Windows with .Net Framework 2.0 or higher
Download WebCruiser - Web Vulnerability Scanner

Download WebCruiser - Web Vulnerability Scanner

Download Lists(V2.5.0):
1.WebCruiser - Web Vulnerability Scanner Personal Edition (206KB, Free download and 30 days trial)
2.WebCruiser - Web Vulnerability Scanner Enterprise Edition (206KB, Free download and 30 days trial)

The difference between the Free, Professional and Enterprise Edition, please refer to FAQ.

System Requirement: .NET FrameWork V2.0 or higher, you can Download .NET FrameWork V2.0 From Microsoft.

User Guide (Jun 19, 2010):
1.User Guide(CHM, 896KB, V2.3)
2.User Guide(PDF, 2.7MB, V2.5)
3.SQL Injection Introduction(PDF, 403KB)

Order and Get Registration Code for WebCruiser - Web Vulnerability Scanner

1. WebCruiser - Web Vulnerability Scanner Personal Edition (Non-Commercial License, US$49.00 )

2.WebCruiser - Web Vulnerability Scanner Enterprise Edition (Commercial License, US$890.00)

The Personal Edition is for security professionals, masters of individual websites etc., non-commercial purpose, 12-month update and support service, No function limit.
The Enterprise Edition is for enterprises, institution, or commercial organizations, 12-month update and support service with top priority. No function limit.

Function \ Edition	Personal	Enterprise
Commercial License	No	Yes
Directories Crawler	Yes	Yes
Vulnerabilities Scanning	Yes	Yes

HTTP Sniffer for iPhone and iPad

HTTP Sniffer is a manual web security testing tool which can capture HTTP requests, include request headers, post data, and you can modify the request and then resend them.
You can get the response headers and source code only, or load the response in web browser.

Notice:
1. Using HTTP Sniffer requires network connection, and Wi-Fi network is preferred.
2. HTTP Sniffer will not capture the requests of other applications, it capture the requests of its own only.
3. HTTP Sniffer is designed for web security professionals only, used for web security penetration testing, such as SQL Injection, Cross-site Scripting(XSS) etc.

Key features:
1. HTTP (Get, Post etc.) Sniffer;
2. HTTP request replay (resend);
3. HTTPS support.

App Store: http://itunes.apple.com/us/app/http-sniffer/id451037645?ls=1&mt=8

FAQ of WebCruiser - Web Vulnerability Scanner

Q: Why I can not run WebCruiser on my computer?
A: It need Windows with .Net Framework 2.0 or higher, if you have not installed .Net Framework, please download it from microsoft web site. Usually, Windows XP and earlier has not .Net Framework installed, but Windows Vista and Windows 7 has .Net Framework Integrated already. You can Download .NET FrameWork V2.0 From Microsoft.

Q: I don't know how to use WebCruiser?
A: User Guide is available from:
1.User Guide(PDF, 2.7MB)
2.User Guide(CHM, 896KB)
3.Online User Guide

Q: What is the difference between the Professional and Enterprise Edition ?
A: They are different in License type.
Professional Edition is for non-commercial use, such as security professionals, masters of individual websites etc., 12-month update and support service, no function limit;
Enterprise Edition is for commercial use, such as enterprises, institution, or commercial organizations, 12-month update and support service with top priority, no function limit. The professional edition and the enterprise edition are all full function editions.