Comments on: Scrawlr: Are We Being Too Greedy?

By: SQL Tutorials

SQL Tutorials — Fri, 01 May 2009 02:56:54 +0000

Does anyone know if there is another language or set of commands beside SQL for talking with databases?

I’m working on a project and am doing some research thanks

By: DaveS

DaveS — Wed, 17 Sep 2008 12:44:52 +0000

So what are the choices?

Acunetix WVS is WAYYY to expensive for the average Joe
WebInspect is also in the above category…

There must be something out there that a “person” (not a big business) can afford, and performs well…

Does anyone know of anything?

Thanks!

By: dave

dave — Mon, 21 Jul 2008 18:06:52 +0000

can you recommend a free or some type of affordable tool?

By: Aldo Lagana

Aldo Lagana — Fri, 18 Jul 2008 11:59:26 +0000

I have yet to play with Scrawlr, but it looks like Paros’ Scanning capability.

Great blog!

By: Chris Eng

Chris Eng — Thu, 26 Jun 2008 19:41:45 +0000

@Mike:

Doh! Sorry about that. Fixed. Maybe I should start reading the bylines. :)

By: Mike Tracy

Mike Tracy — Thu, 26 Jun 2008 19:35:05 +0000

Why does Tom always get the credit?

By: Matasano Chargen » And Now For A Few Words About HP’s “Scrawlr”

Thu, 26 Jun 2008 19:23:07 +0000

[...] of my favorite reads (there are others) have recently written about about Scrawlr and some of what I have read has been [...]

By: links for 2008-06-26 (Jarrett House North)

links for 2008-06-26 (Jarrett House North) — Thu, 26 Jun 2008 02:38:52 +0000

[...] Zero in a bit » Scrawlr: Are We Being Too Greedy? Chris Eng’s review of the new free SQL Injection scanning tool from HP and Microsoft. (tags: security sqlinjection microsoft) [...]

By: Marcin

Marcin — Wed, 25 Jun 2008 18:24:58 +0000

Limitation: Cannot retrieve database contents

Not to mention dangerous…

By: Andrew Becherer

Andrew Becherer — Wed, 25 Jun 2008 16:56:37 +0000

Regarding “Limitation: Does not support sites requiring authentication” the Scrawlr supports the use of a proxy. If your site requires NTLM for authentication you could utilize the NTLM Authorization Proxy Server (ntlmaps). I have not tried this yet, as I don’t have any NTLM requiring sites at the ready. It should work though.