[ernestmiller]

Anyone with any good suggestions??

[CryptixHacking]

Anyone with any good suggestions??

http://sqlmap.org


Is usually known as the best or one of the best software for this.

Works on all OS's and has easy command line access.

Also its python language allows you to easily add to the programs features or create custom plugins.


Now cant say it uses any XSS as cross site scripting isnt of much value on most sites anymore as they have many features in place now on most sites to block such script injection.

For XSS your probably better off going with
https://xsser.03c8.net/

Which is also coded in python and supports Tor proxy.

[______________]

Use Kali Linux. It has loads of these types of programs installed under relevant headings

[CryptixHacking]

Use Kali Linux. It has loads of these types of programs installed under relevant headings

Kali linux isnt required but yes it is a linux distro created to have many of these tools pre-installed.

[ernestmiller]

That is half the fun though trying to bypass it, if its browser based protection for example just need to use another browser

---

I run Kali have all these tools built in already

[[BLANK]]

Just use ZAP, it will scan an entire site for you and tell you if there is a common XSS or SQL issue. Then from there you can use other tools or manual methods of exploitation. Or use Burpsuite, scan the target, and test each parameter manually. There are also browser plugins that will test for xss. Lots of free tools out there.

[ernestmiller]

Is ZAP a reliable scanner then it seems to be more reliable than Vega it does not pick up on strange XSS and SQL that does not exist I have Kali but never actually used it before

[javinzplayer]

Havij is a advanced SQL Database Tool. It is really good to find DBs that are vuln to SQL Injection. But good luck finding a clean version because nearly all of them are infected.

[ernestmiller]

I read you can use Havij with Wine on Linux does anyone have a download of it that is not completely corrupted