There was a fairly extensive thread on this topic in August if you check
the archives at Security Focus for the subject "Application Assessment"
[Moderator feel free to moderate the following if inappropriate]
My personal experience with WebInspect was chosen by SANS for a What
Works WebCast that aired yesterday.
https://www.sans.org/webcasts/show.php?webcastid=90696
Allen Brokken
Information Security and Account Management - IAT Services - University
of Missouri -brokkena@missouri.edu - (573)884-8708
-----Original Message-----
From: Peter Wood [mailto:peterw@firstbase.co.uk]
Sent: Friday, February 17, 2006 9:06 AM
To: webappsec@securityfocus.com
Cc: Charles'
Subject: Re: FW: Tools comparison and evaluation question (AppScan)
We use WebInspect on a daily basis too, and have done so since
version 1.0. It's an excellent tool with some excellent (and
constantly improving) utilities.
Pete
At 13:46 17/02/2006 +0000, Xyberpix wrote:
I use WebInspect pretty much ona daily basis, and wouldn't trade it
for anything.
As far as tools go, it really is a worthwhile addition.
xyberpix
-----Original Message-----
From: Burke, Charles
Sent: Friday, February 17, 2006 7:47 AM
To: 'Serg Belokamen'
Subject: RE: Tools comparison and evaluation question (AppScan)
Also, WebInspect is a very good (commercial) tool. It also includes
some invaluable utilities (Sql Injector, etc) that are a step above
their open source competitors.
-----Original Message-----
From: Serg Belokamen [serg.belokamen@gmail.com]
Sent: Friday, February 17, 2006 2:04 AM
To: webappsec@securityfocus.com
Subject: Tools comparison and evaluation question (AppScan)
Hi All,
I am currently looking at using/evaluating a tool called AppScan (by
watchfire.com).
So the question is in two parts and ASAP reply would be greatly
appreciated.
First:
Without starting a flame war (hopefully) or marketing campaign
(another
hopefully) can any one tell me abut their experience with the
software,
what you find useful about it, what not, any annoyances, missing
functionality, etc.
Second:
Can anyone recommend any simular type of software, preferably open
source (although not at all essential), and describe its performance,
usability and "usefulness" so to speak using AppScan as a reference
point.
Thanks,
Serg
--------------------------------------------------------------------
Peter Wood FBCS CITP MIEEE MIMIS CISSP
Chief of Operations
First Base Technologies
Office: +44 (0)1273 454525
Mobile: +44 (0)7774 239915
www.fbtechies.co.uk
www.white-hats.co.uk
------------------------------------------------------------------------
-
This List Sponsored by: SpiDynamics
ALERT: "How A Hacker Launches A Web Application Attack!"
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world
examples of recent hacking methods such as: SQL Injection, Cross Site
Scripting and Parameter Manipulation
https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gR
l
------------------------------------------------------------------------
--
-------------------------------------------------------------------------
This List Sponsored by: SpiDynamics
ALERT: "How A Hacker Launches A Web Application Attack!"
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world
examples of recent hacking methods such as: SQL Injection, Cross Site
Scripting and Parameter Manipulation
https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------
