CyD Software Labs > CyD Network Utilities - Security tools > Automatic test for WEB site vulnerabilities

Automatic test for WEB site vulnerabilities:

Security test is a new feature of CyD NET Utils 5.0. Now you can test your WEB site on errors:

SQL Injection

XSS (Cross Site Scripting)

PHP includes

The most commonly used database attack is SQL Injection. The attack is perpetrated by inserting an SQL query instead of a parameter into the URL field, to be executed by the database server. Being able to execute SQL commands on the database server makes it possible to destroy all database data. For more information about SQL Injection read SQL Injection and PHP document on our site.

Web applications pose a unique threat as programming web applications does not require employing skilled programmers. Anyone with access to various point and click tools is now a web developer. All software developers be able to make mistakes. Test your WEB software with CyD NET Utils for most popular errors to prevent hacker attack.

Test your WEB site security

To test security, choose Test WEB server security from the Security menu or press test security button. A dialog window will be displayed where you can test your WEB server:

test web server security module

Type WEB server URL in WEB site URL field. For example URL must be look like: http://www.servername.com/index.php

Press Test WEB Servers button. A dialog window will be displayed where you can select the test properties:

test web server security properties dialog

In the dialog you can select what kind of errors you want to search for on the WEB server. You may choose: SQL Injection, XSS (Cross Site Scripting), Include vulnerabilities and Broken links.

Click OK to start security test. Security test result:

In this example we see Warning message:

WARNING: http://www.mnthunder.com/igsbase/igstemplate.cfm May be have SQL Injection error in param:SRC

What does it mean? WEB program http://www.mnthunder.com/igsbase/igstemplate.cfm may have the SQL Injection error in the SRC parameter. Contact with your WEB developer to check this out.

Back to CyD Network Utilities - Security tools