Is there a audit system that can help me try my strings? Such as user agents, post/get data, a simple way to test general sql injections to see how my rule sets hold?

I know with fire fox I can change my user agent but what about trying post and get type attacks?

migrated from serverfault.com Oct 25 '12 at 19:13

This question came from our site for system and network administrators.


You should test your code in a real world scenario with a web application scanner like skipfish. You could also try manually exploiting Damn Vulnerable Web App.

Tamperdata can be used to build and modify requests. Or just plain old html.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy