SQL Injection

Hi Team, we use asp.net application and MS SQL Server 2008 , how can i test my websites and datbases are safe or not how to test it? after googling i got this url http://www.microsoft.com/download/en/details.aspx?DisplayLang=en&id=16305

but this on is for net application, and my application is ASP.Net

asked Jan 09 '12 at 08:48 PM in Default

ramesh 1
1.7k ● 46 ● 63 ● 68

(comments are locked)

2 answers:

Hi Ramesh,

Please go through this link I hope this could help you.

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=19968

answered Jan 09 '12 at 10:32 PM

Amardeep
1.3k ● 71 ● 82 ● 86

(comments are locked)

On top of traditional firewalls there are now Web Application firewalls (WAF) available. Quite a few organizations are implementing these to secure their environment. As far as for the basic testing and good reads you can visit

http://msdn.microsoft.com/en-us/magazine/cc163917.aspx

http://weblogs.asp.net/scottgu/archive/2006/09/30/Tip_2F00_Trick_3A00_-Guard-Against-SQL-Injection-Attacks.aspx (This one have links to some quite good guidelines)

For some tools

http://www.databasesecurity.com/sqlinjection-tools.htm

http://labs.securitycompass.com/exploit-me/

answered Jan 10 '12 at 03:08 AM