WebCruiser - Web Vulnerability Scanner Personal / Free

Building a website means more than just making it appealing to visitors as security issues also have to be taken into consideration.

WebCruiser Web Vulnerability Scanner is a tool created for the purpose of checking for weak spots that can be leveraged by potential attackers trying to reach sensitive information such as the databases with user credentials.

The application includes a crawler that roams the site’s directories and sites as well as a scanner that can detect vulnerabilities against penetration techniques based on SQL injection, XSS (cross-site scripting) or XPath injection.

The interface is friendly enough for less experienced users to be able to handle it with no problems but some knowledge is required for interpreting the results, adjusting the parameters and, most importantly, for fixing the issues.

It integrates a web browser for loading up the website subjected to the auditing procedure and all the options run down in the left hand part of the application window.

There are options for defining the user agent for the web browser as well as for setting the page extensions that should be crawled.

As far as the settings for vulnerability detection are concerned, WebCruiser boasts the ability to scan for SQL injection, which includes analysis of the URL, post data and cookies. Uncovering cross-site scripting and XPath vulnerabilities can also be selected.

The program brings to the table a set of tools that can help with the penetration testing. The list includes utilities for resending data to the website, for handling cookies, code and strings.

WebCruiser Web Vulnerability Scanner can prove to be a powerful tool in the right hands as it can help reveal where the website is vulnerable. It is versatile and working with it should not be a problem for website administrators.