HackBar - Firefox plugin for XSS, SQL Injection and Webapp Pentest

This toolbar will help you in testing sql injections, XSS holes and site security. It is NOT a tool for executing standard exploits and it will NOT learn you how to hack a site. Its main purpose is to help a developer do security audits on his code. If you know what your doing, this toolbar will help you do it faster. If you want to learn to find security holes, you can also use this toolbar, but you will probably also need a book, and a lot of google.

hackbar-screenshot


Similar tools for testing on "friendy URLs"?

I'm looking for a tool that can check for SQL injection, XSS, etc on friendly URLs. Nowadays we don't see many URLs with the structure /a.php?foo=bar&bar=foo .. but we only see /a/foo/bar/ ...hackbar won't work on these type of URLs... and so does many other similar tools out there.. any guides?

Websites with friendly urls

Websites with friendly urls should be able to handle both (as this is implemented via mod_rewrite ) eg...

if you send

a.php?foo=bar&bar=foo

OR

/a/foo/bar/

Both should work...

Post new comment

  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <h1> <quote> <img>
  • Lines and paragraphs break automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Copy the characters (respecting upper/lower case) from the image.