Someone is running injection scanner on my site

wmac

Hello,

Apparently someone has become interested in my new poular community site (which I have developed completely myslef).

He is running a automated program which tries hundreds of parameters on my site to see if it can inject something.

Could someone please show me such a program so that I can do this scanning myself (to find probable bugs)?

Regards,
Mac

drew010

http://www.nstalker.com/eng/products/nstealth/
dont waste your time with the free version, if you are serious about finding exploits on your server, buy the full version. it has all the latest up to date bugs and exploits, the free one contains older now more unlikely bugs.

wmac

Hello

Actually he is trying to inject parameters (SQL etc.) into my PHP scripts. (using POST and GET parameters).

Regards