Differences Between Web Application Scanning Tools when Scanning for XSS and SQLi
summary
Controlled tests pit two open source scanners and two commercial styles (one automated, one proxy) against four vulnerable apps and measure SQLi and XSS detection rates, finding found 14–18 SQLi and found 5–14 XSS with open source tools missing the most issues, all tools missed all stored XSS, crawlers frequently inflate results by crawlers report 5× extra pages, and fixes focus on richer payloads, per-request randomized markers, scope tuning and combining automated and proxy scanners for best coverage.
AI-written summary · about
chapters (7)
- 0:00Introduction and context
- 2:00Overview of scanning tools
- 7:15Previous research and findings
- 14:21Experimental methodology
- 17:24Key results and analysis
- 25:19Modern application challenges
- 36:22Evaluation and conclusions
related talks
43m Web Application Vulnerability Scanners: An Intro & Discussion
31m360° View of XSS
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
42mFinding Bad Needles On A Worldwide Scale
46mHow to perform security testing of a Web application
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
09mAutomated Application Security Testing
43mSecurity Testing Tools: Can I Touch You There?