摘要: Netsparker是一款WEB脆弱性扫描器，专业版本功能强大，当然价格也不低——高达数千美元。好在其免费版本提供SQL注入扫描和XSS扫描功能。虽然在功能方面还是有不小的限制，但是准确性不错，平时做渗透测试的时候，还是比较方便的。 游侠安全网推荐指数：★★★...
Netsparker是一款WEB脆弱性扫描器，专业版本功能强大，当然价格也不低——高达数千美元。好在其免费版本提供SQL注入扫描和XSS扫描功能。虽然在功能方面还是有不小的限制，但是准确性不错，平时做渗透测试的时候，还是比较方便的。
游侠安全网推荐指数：★★★☆
下载地址：http://www.mavitunasecurity.com/communityedition/
Netsparker Community Edition is a SQL Injection Scanner. It's a free edition of our web vulnerability scanner for the community so you can start securing your website now. It's user friendly, fast, smart and as always False-Positive-Free.
It shares many features with professional edition. It can detect SQL Injection and XSS issues better than many other scanners (if not all), and it's completely FREE.
Netsparker can scan for lots of web security vulnerabilities, this free version of Netsparker is a great SQL injection scanner. It can scan and exploit SQL Injection vulnerabilities in different back-end databases with really high accuracy and without any false-positives. Netsparker is the best SQL Injection Scanner among the all commercial, free and open source web vulnerability scanner according to 3rd party benchmark by finding 98.53% of all SQL Injections in tests1.
