Re: PHP Application Vuln. Testing
| From: | Matt Stone | Date: | Tue, 07 Feb 2006 22:33:24 +0000 |
| Subject: | Re: PHP Application Vuln. Testing | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-230059@lists.php.net to get a copy of this message | ||
----- Original Message -----
From: "Jason Gerfen" <jason.gerfen@scl.utah.edu>
To: "PHP General (E-mail)" <php-general@lists.php.net>
Sent: Tuesday, February 07, 2006 4:54 PM
Subject: [PHP] PHP Application Vuln. Testing
>
> Is there any product available, commercial or free which performs source
> code auditing which *specificly searches PHP code for SQL, XSS type of
> attacks or vulnerabilities? TIA.
>
http://www.parosproxy.org/index.shtml
doesn't audit source code but if you
can dump your code on a test box you can test it from another machine.
Cheers
Matt