June 19, 2009

New PHP Intepreter-Based XSS and SQL Security Tester

Posted by Dave on June 19, 2009 in php

Researchers from MIT, Stanford and Syracuse have developed a program named “Ardilla” which can analyze PHP code for Cross-Site Scripting (XSS) and SQL injection attack vulnerabilities. The researchers say Ardilla found 68 never-before found vulnerabilities in five different PHP applications using the tool — 23 SQL injection and 45 XSS flaws.
Ardilla is an automated tool […]