In my website I have an sql injection vulnerability.
But when I scan my website with Nessus under "Web app tests" there is no result on sql injection.
Why is this? What should I do to make this work?
-
1Ok then. What's your question?– PolynomialDec 19, 2012 at 10:59
-
1Welcome to Information Security. Nessus is a network scanner. You really shouldnt expect a rigorous application scan, even if you might get lucky on occassion. Besides, there is no real question here...– AviD ♦Dec 19, 2012 at 11:03
-
edited to try and make it a question...– Rory Alsop ♦Dec 19, 2012 at 11:05
-
Try sqlmap sqlmap.org ; it is the library Metasploit uses.– Chad BrewbakerDec 19, 2012 at 17:56
Add a comment
|
1 Answer
Nessus is just a tool - it can do things you configure it to, but it is not intelligent in any way.
If you are detecting SQL as an authenticated user, Nessus will not be able to do this unless you allow it to authenticate to your application
If you are detecting it at a specific URL, you need to make sure Nessus is looking at that URL and that it is checking it for SQL.
Many things Nessus misses are down to misconfiguration or permissions, but even once you have set a tool up perfectly, they all have false positives and negatives - which incidentally is why any solely-tool based security scan should not be relied on without manual confirmation!
answered Dec 19, 2012 at 11:04
