RE: Web Application Scanners

["degracia.carron.joseangel () servexternos repsolypf com" <degracia.carron.joseangel () repsolypf com>]

Watchfire Appscan from Rational (IBM)(I play with this tool everyday) is good web app vulnerability scanner.. (Is not 
free :( ) but you can also look for another reference here....

http://sectools.org/web-scanners.html or http://vulnerabilityteam.wordpress.com (is in Spanish but all the links and 
online tool in the right side bar are in English..)(is my blog)(also some news are in English too)

regards...

joe d gracia
security vulnerability expert
repsol, spain


-----Mensaje original-----
De: listbounce () securityfocus com [mailto:listbounce () securityfocus com] En nombre de Marc-André Laverdière
Enviado el: jueves, 23 de octubre de 2008 14:21
Para: security-basics () securityfocus com
Asunto: Web Application Scanners

Hi folks,

What are the Web Application vulnerability scanners out there? Any
good/bad experience with any of them?

--
Marc-André LAVERDIÈRE
"Perseverance must finish its work so that you may be mature and
complete, not lacking anything." -James 1:4
mlaverd.theunixplace.com/blog

 /"\
 \ /    ASCII Ribbon Campaign
  X      against HTML e-mail
 / \
AVISO LEGAL:
Esta informacion es privada y confidencial y esta dirigida unicamente a su destinatario. Si usted no es el destinatario 
original de este mensaje y por este medio pudo acceder a dicha informacion por favor elimine el mensaje. La 
distribucion o copia de este mensaje esta estrictamente prohibida. Esta comunicacion es solo para propositos de 
informacion y no deberian ser considerados como una declaracion oficial de Repsol YPF. La transmision de e-mails no 
garantiza que el correo electronico sea seguro o libre de error. Por consiguiente, no manifestamos que esta informacion 
sea completa o precisa. Toda informacion esta sujeta a alterarse sin previo aviso.

This information is private and confidential and intended for the recipient only. If you are not the intended recipient 
of this message you are hereby notified that any review, dissemination, distribution or copying of this message is 
strictly prohibited. This communication is for information purposes only and should not be regarded as an official 
statement from Repsol YPF. Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not 
represent that this information is complete or accurate and it should not be relied upon as such. All information is 
subject to change without notice.