We first wrote about our favourite web scanners, Sandcat in a post here. Now, Sandcat version 4.0 is out for grabs!
“Sandcat combines Syhunt’s state-of-the-art, multi-process scanning technologies with the incredibly fast LUA language to perform remote web application security scans. While spidering a web site and hunting vulnerabilities, Sandcat emulates a modern, HTML 5-aware web browser.”
This is what this update contains:
- Fast and ultra fast scans – Sandcat 4 provides significantly faster scans (500+ requests /sec when running a common web server scan).
- Faster JavaScript execution.
- Browser emulation expanded to five modes: Chrome, Firefox, IE, Opera and Safari. When changing the emulation mode you are changing more than the user agent. We are researching differences between the browsers and replicating them.
- Greatly improved support for large web sites
- CatSense, a new feature that scans and displays in a new way relevant information about each page.
- Improved overall stability when running in both multithreaded and non-multithreaded mode and when scanning JavaScript-enabled sites.
- Lower CPU usage when scanning hosts.
- SandcatCS, a console version of Sandcat 4.0. Allows to control the new features and scan methods
Download Sandcat version 4.0 here.
“Sandcat combines Syhunt’s state-of-the-art, multi-process scanning technologies with the incredibly fast LUA language to perform remote web application security scans. While spidering a web site and hunting vulnerabilities, Sandcat emulates a modern, HTML 5-aware web browser.”
Acunetix: Acunetix WVS automatically checks your web applications for XSS, SQL Injection & other vulnerabilities. It also checks for other vulnerabilities in popular web applications such as Joomla, PHPbb and identifies files with XSS vulnerabilities. Acunetix checks your web applications for coding errors that result in Cross Site Scripting vulnerabilities.
2. N-Stalker: N-Stalker Web Application Security Scanner 2009 Free Edition provides a restricted set of free Web Security Assessment checks to enhance the overall security of your web server infrastructure, using the most complete web attack signature database available in the market – “N-Stealth Web Attack Signature Database“.
3. Wikto: “Wikto is a tool that checks for flaws in webservers. It provides much the same functionality as Nikto but adds various interesting pieces of functionality, such as a Back-End miner and close Google integration. Wikto is written for the MS .NET environment and registration is required to download the binary and/or source code. ”
Sandcat is the next-generation patented web app sec assessment technology developed by security experts. It can simulate web-based attacks while emulating modern web browsers. It can run JS and auto interact with web pages. It is the most advanced fault-injection testing tool for web applications. 
8. Wapiti:We wrote about this tool 
