Details of Tested Scanners

Scanner License Development

Technology

WebSite Alternative Source

Acunetix WVS

(Commercial

Edition)

Commercial Unknown

(Win32)

(General)

http://www.acunetix.com/vulnerability-

scanner/

Acunetix WVS

Free Edition

Freeware Unknown

(Win32)

http://www.acunetix.com/cross-site-

scripting/scanner.htm

aidSQL GPL2 PHP (General http://code.google.com/p/aidsql/

Andiparos GPL2 Java (1.5.x) http://code.google.com/p/andiparos/

arachni GPL2 Ruby (1.9.x) http://github.com/zapotek/arachni http://arachni.segfault.gr/news

Burp Suite

Professional

Commercial Java (1.6.x) http://portswigger.net/burp/

Cenzic Hailstorm

Professional

Commercial .Net (3.5) http://www.cenzic.com/products/cenzic-

hailstormPro/

crawlfish GPL2 .Net (1.1) http://code.google.com/p/crawlfish/ http://www.ericfish.com/?q=234

Damn Small SQLi

Scanner (DSSS)

GPL2 Python

(2.6.x)

https://github.com/stamparm/DSSS http://unconciousmind.blogspot.com/2011

/07/damn-small-sqli-scanner-dsss.html

Gamja GPL Perl (5.x) http://sourceforge.net/projects/gamja/

Grabber BSD Python

(2.4.x)

http://rgaucher.info/beta/grabber/ http://rgaucher.info/beta/grabber/Grabber

-dist-win.zip

Grendel Scan GPL3 Java (1.5.x) http://grendel-scan.com/

IBM Rational

AppScan

Commercial .Net (3.5) http://www-

01.ibm.com/software/awdtools/appscan/

iScan GPL2 Java (1.6.x) http://www.evilsocket.net/46/iscan.html

JSky (Commercial

Edition)

Commercial Unknown

(Win32)

http://www.nosec-

inc.com/en/products/jsky/

http://www.nosec-inc.com/en/evaluate/

JSKY Free Edition Freeware MFC (Win32) http://down2.nosec.org/jsky.rar

LoverBoy Custom Open Source .Net (2.0) http://sourceforge.net/projects/loverboy/

Mini MySqlat0r GPL Java (1.6.x) http://www.scrt.ch/pages_en/minimysqlator

.html

Nessus Commercial Unknown (Wi http://www.tenable.com/products/nessus

Netsparker

(Commercial

Edition)

Commercial .Net (3.5) http://www.mavitunasecurity.com/netspark

er/

https://www.mavitunasecurity.com/demo/

Netsparker

Community

Edition

Freeware .Net (3.5) http://www.mavitunasecurity.com/commun

ityedition/

N-Stalker 2009

Free Edition

Freeware Unknown

(Win32)

http://www.nstalker.com/products/free

Page 1 of 301 August 2011

Scanner License Development

Technology

WebSite Alternative Source

N-Stalker 2012

Free Edition

Freeware Unknown

(Win32)

http://www.nstalker.com/products/editions

/free/download/

NTOSpider Commercial Java (1.6.x) http://www.ntobjectives.com/ntospider

Oedipus GPL2 Ruby (1.8.x) http://rubyforge.org/projects/oedipus http://oedipus.rubyforge.org/

openAcunetix Custom Open Source Java (1.6.x) http://www.redlevel.org/ http://packetstormsecurity.org/filedesc/op

enAcunetix.zip.html

Paros Proxy Clarified Artistic License

(GPL Compatible)

Java (1.4.x) http://www.parosproxy.org/ http://sourceforge.net/projects/paros/files

/

ParosPro Commercial Java (1.6.x) http://www.milescan.com/hk/index.php?opt

ion=com_content&view=article&id=98&Item

id=175

http://www.milescan.com/hk/index.php?o

ption=com_content&view=article&id=15&I

temid=157

PowerFuzzer GPL Python (2.5.x http://www.powerfuzzer.com/

Priamos Freeware Unknown (Wi http://www.priamos-project.com/

ProxyStrike GPL2 Python

(2.6.x)

http://www.edge-

security.com/proxystrike.php

http://code.google.com/p/proxystrike/

safe3wvs Freeware .Net (2.0) http://www.safe3.com.cn/en/safe3wvs.htm http://code.google.com/p/safe3wvs/

Sandcat Free

Edition

Freeware Unknown

(Win32)

http://www.syhunt.com/?n=Sandcat.Sandca

t

http://www.indianz.ch/tools/web/sandcat.

zip

Sandcat Pro Commercial Unknown

(Win32)

http://www.syhunt.com/?n=Sandcat.Sandca

t

http://www.syhunt.com/?n=Sandcat.Pro

SandcatCS Freeware Unknown

(Win32)

http://www.syhunt.com/?n=Sandcat.Downl

oad

Scrawler Freeware Unknown

(Win32)

(General)

https://h30406.www3.hp.com/campaigns/2

008/wwcampaign/1-

57C4K/index.php?mcc=DNXA&jumpid=in_r1

1374_us/en/large/tsg/w1_0908_scrawlr_red

irect/mcc_DNXA

http://www.communities.hp.com/security

software/blogs/spilabs/archive/2008/06/2

3/finding-sql-injection-with-scrawlr.aspx

ScreamingCSS Custom Open Source Perl (5.x) http://www.devitry.com/screamingCSS.html

Secubat LGPL .Net (2.0) http://www.iseclab.org/projects/secubat/ http://secubat.codeplex.com/

SkipFish ASF2 C (General) http://code.google.com/p/skipfish/

SQID (SQL

Injection Digger)

GPL2 Ruby (1.8.x) http://rubyforge.org/projects/sqid/ http://sqid.rubyforge.org/

SQLiX FOSS Perl (5.x) http://www.owasp.org/index.php/Category:

OWASP_SQLiX_Project

http://www.mediafire.com/?5lbt0tb1jee

sqlmap GPL2 Python

(2.6.x)

http://sqlmap.sourceforge.net/ http://sourceforge.net/projects/sqlmap/fil

es/

Uber Web

Security Scanner

GPL3 Python

(2.6.x)

http://noptrix.net/codes.html http://packetstormsecurity.org/files/autho

r/7386/

Vega EPL1 Java (1.6.x) http://subgraph.com/vega_download.php https://support.subgraph.com/trac/

VulnDetector Custom Open Source Python (2.4.x http://bcable.net/project.php?vulndetector

W3AF GPL2 Python (2.6.x http://w3af.sourceforge.net/ http://sourceforge.net/projects/w3af/files/

Wapiti GPL2 Python (2.6.x http://www.ict-romulus.eu/web/wapiti http://wapiti.sourceforge.net/

Page 2 of 301 August 2011

Scanner License Development

Technology

WebSite Alternative Source

Watobo GPL2 Ruby (1.8.x) http://sourceforge.net/apps/mediawiki/wat

obo/index.php?title=Main_Page

http://sourceforge.net/projects/watobo/fil

es/

Web Injection

Scanner (WIS)

Shareware Unknown

(Win32)

http://www.netxeyes.com/down.html http://www.netxeyes.com/2003.html

WebCruiser

Enterprise Edition

Commercial .Net (2.0) http://sec4app.com/download.htm

WebCruiser Free

Edition

Freeware .Net (2.0) http://sec4app.com/download.htm http://www.filecluster.com/Security/Other

-Utilities/Download-WebCruiser-Web-

Vulnerability-Scanner.html

WebInspect Commercial .Net (3.5) https://download.hpsmartupdate.com/webi

nspect/

https://www.fortify.com/products/web_in

spect.html

WebScarab GPL Java (1.5.x) http://www.owasp.org/index.php/Category:

OWASP_WebScarab_Project

http://dawes.za.net/rogan/webscarab/

WebSecurify GPL2 Javascript (Ge http://www.websecurify.com/ http://code.google.com/p/websecurify/

WSTool GPL PHP (General http://sourceforge.net/projects/wstool/ http://wstool.sourceforge.net/

Xcobra GPL3 Python (2.6.x http://code.google.com/p/xcobra/

XSSer GPL3 Python

(2.5.x)

http://xsser.sourceforge.net/ http://sourceforge.net/projects/xsser/files

/

XSSploit GPL2 Python (2.5.x http://www.scrt.ch/pages_en/xssploit.html

XSSS GPL2 Perl (5.x) http://www.sven.de/xsss/

ZAP ASF2 Java (1.6.x) http://code.google.com/p/zaproxy/ http://www.owasp.org/index.php/OWASP

_Zed_Attack_Proxy_Project

Page 3 of 301 August 2011