Comments on: MIT/Stanford/Syracuse Team Develop New PHP Intepreter-Based XSS and SQL Security Tester

By: Kris

Kris — Mon, 16 Nov 2009 18:54:33 +0000

A quick update… Acunetix WVS can do this, so it doesn’t look like Ardilla is the only way. However, Acunetix is very expensive (close to $10,000 a license, last time I checked). This may be a project for my Java Certified Developer certification.

I talked to the guys at Acunetix about how their query taint tracking works, and they were a little tight lipped. I haven’t had a chance to look at the code, although a reputable source tells me that it needs some work…

I found this link to a list of web vulnerability scanners. I’m working through them when I get the time.

http://sectools.org/web-scanners.html

By: Nicolae Nmaolovan

Nicolae Nmaolovan — Mon, 28 Sep 2009 18:29:58 +0000

Hi, I’m interested too, is there any know alternatives ? This would be very useful..

By: Kris

Kris — Tue, 18 Aug 2009 16:29:31 +0000

I’ve talked with the guys at Washington about this, and they are interested in making it Open Source, but it doesn’t look like it has moved forward yet. I’m keeping an eye on this, and may have a go on my own, because I would love to use it too.

By: Breck

Breck — Mon, 17 Aug 2009 23:13:19 +0000

Wow, really smart idea.

Any updates on whether this will be released? I’ve got some large codebases that I would love to try it on.

By: How I Make $5000 a Month Posting Links on Google

How I Make $5000 a Month Posting Links on Google — Fri, 26 Jun 2009 00:43:33 +0000

Loved your latest post, by the way.

By: Katy

Katy — Wed, 24 Jun 2009 03:43:40 +0000

Pretty nice post. I just found your blog and wanted to say
that I have really liked reading your blog posts. Anyway
I’ll be subscribing to your feed and I hope you write again soon!

By: Wayne State Web Communications Blog » Blog Archive » [Friday Links] The Summer Edition

Sun, 21 Jun 2009 13:15:30 +0000

[...] MIT/Stanford/Syracuse Team Develop New PHP Intepreter-Based XSS and SQL Security Tester [...]

By: Digital Media Minute

Digital Media Minute — Sat, 20 Jun 2009 07:04:22 +0000

PHP Security Checker…

We did a post on ten security checks for PHP, and pointed to a PHP security guide as well. On a more recent, related note, you might want to take a look at Rkrishardy.com regarding researchers from MIT, Stanford and Syracuse having developed “Ardilla…