Microsoft recently released three free SQL Injection detection tools

As SQL injection attacks increase significantly, Microsoft recently released three free tools to help website administrators and detect risks and block possible attacks.

Scrawlr

: Https://download.spidynamics.com/Products/scrawlr/

This tool developed by Microsoft and HP crawls the website, analyzes query strings of all webpages, and finds the SQL Injection risk. Scrawlr uses some of the same HP webinspect technology, but only detects SQL Injection risks. Scrawlr crawls the entire website from a starting URL entry and analyzes all webpages on the website to find possible vulnerabilities.

Microsoft Source Code Analyzer for SQL Injection

: Http://www.microsoft.com/downloads/details.aspx? Familyid = 58a7c46e-a599-4fcb-9ab4-a4334146b6ba & displaylang = en

This tool called mscasi can detect ASPCodeThe SQL Injection Vulnerability (ASP code is known as the SQL injection vulnerability) is discovered. You need to provide original code to mscasi. mscasi will help you find the risky code location.

URL scan 3.0

: Http://www.iis.net/downloads/default.aspx? Tabid = 34 & G = 6 & I = 1697

This tool allows IIS to restrict certain types of HTTP requests. By limiting specific HTTP requests, it can prevent some harmful requests from being executed on the server. URLScan discovers malicious requests through a series of keywords and blocks the execution of malicious requests.