Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a audit system that can help me try my strings? Such as user agents, post/get data, a simple way to test general sql injections to see how my rule sets hold?

I know with fire fox I can change my user agent but what about trying post and get type attacks?

share|improve this question

migrated from Oct 25 '12 at 19:13

This question came from our site for system and network administrators.

You should test your code in a real world scenario with a web application scanner like skipfish. You could also try manually exploiting Damn Vulnerable Web App.

Tamperdata can be used to build and modify requests. Or just plain old html.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.