Details of Tested Scanners

Scanner

License

Development WebSite
Technology

Acunetix WVS
(Commercial
Edition)

Commercial

Unknown
(Win32)
(General)

http://www.acunetix.com/vulnerabilityscanner/

Acunetix WVS
Free Edition

Freeware

Unknown
(Win32)

http://www.acunetix.com/cross-sitescripting/scanner.htm

aidSQL

GPL2

PHP (General

http://code.google.com/p/aidsql/

Andiparos

GPL2

Java (1.5.x)

http://code.google.com/p/andiparos/

arachni

GPL2

Ruby (1.9.x)

http://github.com/zapotek/arachni

Burp Suite
Professional

Commercial

Java (1.6.x)

http://portswigger.net/burp/

Cenzic Hailstorm
Professional

Commercial

.Net (3.5)

http://www.cenzic.com/products/cenzichailstormPro/

crawlfish

GPL2

.Net (1.1)

http://code.google.com/p/crawlfish/

http://www.ericfish.com/?q=234

Damn Small SQLi

Scanner (DSSS)

GPL2

Python
(2.6.x)

https://github.com/stamparm/DSSS

http://unconciousmind.blogspot.com/2011
/07/damn-small-sqli-scanner-dsss.html

Gamja

GPL

Perl (5.x)

http://sourceforge.net/projects/gamja/

Grabber

BSD

Python
(2.4.x)

http://rgaucher.info/beta/grabber/

Grendel Scan

GPL3

Java (1.5.x)

http://grendel-scan.com/

IBM Rational
AppScan

Commercial

.Net (3.5)

http://www01.ibm.com/software/awdtools/appscan/

iScan

GPL2

Java (1.6.x)

http://www.evilsocket.net/46/iscan.html

JSky (Commercial
Edition)

Commercial

Unknown
(Win32)

http://www.nosecinc.com/en/products/jsky/

JSKY Free Edition

Freeware

MFC (Win32)

http://down2.nosec.org/jsky.rar

LoverBoy

Custom Open Source

.Net (2.0)

http://sourceforge.net/projects/loverboy/

Mini MySqlat0r

GPL

Java (1.6.x)

http://www.scrt.ch/pages_en/minimysqlator
.html

Nessus

Commercial

Unknown (Wi http://www.tenable.com/products/nessus

Netsparker
(Commercial
Edition)

Commercial

.Net (3.5)

http://www.mavitunasecurity.com/netspark
er/

Netsparker
Community
Edition

Freeware

.Net (3.5)

http://www.mavitunasecurity.com/commun
ityedition/

N-Stalker 2009
Free Edition

Freeware

Unknown
(Win32)

http://www.nstalker.com/products/free

01 August 2011

Alternative Source

http://arachni.segfault.gr/news

http://rgaucher.info/beta/grabber/Grabber
-dist-win.zip

http://www.nosec-inc.com/en/evaluate/

https://www.mavitunasecurity.com/demo/

Page 1 of 3

Scanner

License

Development WebSite
Technology

N-Stalker 2012
Free Edition

Freeware

Unknown
(Win32)

http://www.nstalker.com/products/editions
/free/download/

NTOSpider

Commercial

Java (1.6.x)

http://www.ntobjectives.com/ntospider

Oedipus

GPL2

Ruby (1.8.x)

http://rubyforge.org/projects/oedipus

http://oedipus.rubyforge.org/

openAcunetix

Custom Open Source

Java (1.6.x)

http://www.redlevel.org/

http://packetstormsecurity.org/filedesc/op
enAcunetix.zip.html

Paros Proxy

Clarified Artistic License

(GPL Compatible)

Java (1.4.x)

http://www.parosproxy.org/

http://sourceforge.net/projects/paros/files
/

ParosPro

Commercial

Java (1.6.x)

http://www.milescan.com/hk/index.php?opt http://www.milescan.com/hk/index.php?o
ion=com_content&view=article&id=98&Item ption=com_content&view=article&id=15&I
id=175
temid=157

PowerFuzzer

GPL

Python (2.5.x

http://www.powerfuzzer.com/

Priamos

Freeware

Unknown (Wi http://www.priamos-project.com/

ProxyStrike

GPL2

Python
(2.6.x)

http://www.edgesecurity.com/proxystrike.php

http://code.google.com/p/proxystrike/

safe3wvs

Freeware

.Net (2.0)

http://www.safe3.com.cn/en/safe3wvs.htm

http://code.google.com/p/safe3wvs/

Sandcat Free
Edition

Freeware

Unknown
(Win32)

http://www.syhunt.com/?n=Sandcat.Sandca http://www.indianz.ch/tools/web/sandcat.
t
zip

Sandcat Pro

Commercial

Unknown
(Win32)

http://www.syhunt.com/?n=Sandcat.Sandca http://www.syhunt.com/?n=Sandcat.Pro
t

SandcatCS

Freeware

Unknown
(Win32)

http://www.syhunt.com/?n=Sandcat.Downl
oad

Scrawler

Freeware

Unknown
(Win32)
(General)

https://h30406.www3.hp.com/campaigns/2 http://www.communities.hp.com/security
008/wwcampaign/1software/blogs/spilabs/archive/2008/06/2
57C4K/index.php?mcc=DNXA&jumpid=in_r1 3/finding-sql-injection-with-scrawlr.aspx
1374_us/en/large/tsg/w1_0908_scrawlr_red
irect/mcc_DNXA

ScreamingCSS

Custom Open Source

Perl (5.x)

http://www.devitry.com/screamingCSS.html

Secubat

LGPL

.Net (2.0)

http://www.iseclab.org/projects/secubat/

SkipFish

ASF2

C (General)

http://code.google.com/p/skipfish/

SQID (SQL
Injection Digger)

GPL2

Ruby (1.8.x)

http://rubyforge.org/projects/sqid/

http://sqid.rubyforge.org/

SQLiX

FOSS

Perl (5.x)

http://www.owasp.org/index.php/Category:
OWASP_SQLiX_Project

http://www.mediafire.com/?5lbt0tb1jee

sqlmap

GPL2

Python
(2.6.x)

http://sqlmap.sourceforge.net/

http://sourceforge.net/projects/sqlmap/fil
es/

Uber Web
Security Scanner

GPL3

Python
(2.6.x)

http://noptrix.net/codes.html

http://packetstormsecurity.org/files/autho
r/7386/

Vega

EPL1

Java (1.6.x)

http://subgraph.com/vega_download.php

https://support.subgraph.com/trac/

VulnDetector

Custom Open Source

Python (2.4.x

http://bcable.net/project.php?vulndetector

W3AF

GPL2

Python (2.6.x

http://w3af.sourceforge.net/

http://sourceforge.net/projects/w3af/files/

Wapiti

GPL2

Python (2.6.x

http://www.ict-romulus.eu/web/wapiti

http://wapiti.sourceforge.net/

01 August 2011

Alternative Source

http://secubat.codeplex.com/

Page 2 of 3

Scanner

License

Development WebSite
Technology

Alternative Source

Watobo

GPL2

Ruby (1.8.x)

http://sourceforge.net/apps/mediawiki/wat
obo/index.php?title=Main_Page

http://sourceforge.net/projects/watobo/fil
es/

Web Injection
Scanner (WIS)

Shareware

Unknown
(Win32)

http://www.netxeyes.com/down.html

http://www.netxeyes.com/2003.html

WebCruiser
Enterprise Edition

Commercial

.Net (2.0)

http://sec4app.com/download.htm

WebCruiser Free
Edition

Freeware

.Net (2.0)

http://sec4app.com/download.htm

http://www.filecluster.com/Security/Other
-Utilities/Download-WebCruiser-WebVulnerability-Scanner.html

WebInspect

Commercial

.Net (3.5)

https://download.hpsmartupdate.com/webi
nspect/

https://www.fortify.com/products/web_in
spect.html

WebScarab

GPL

Java (1.5.x)

http://www.owasp.org/index.php/Category:
OWASP_WebScarab_Project

http://dawes.za.net/rogan/webscarab/

WebSecurify

GPL2

Javascript (Ge http://www.websecurify.com/

http://code.google.com/p/websecurify/

WSTool

GPL

PHP (General

http://sourceforge.net/projects/wstool/

http://wstool.sourceforge.net/

Xcobra

GPL3

Python (2.6.x

http://code.google.com/p/xcobra/

XSSer

GPL3

Python
(2.5.x)

http://xsser.sourceforge.net/

XSSploit

GPL2

Python (2.5.x

http://www.scrt.ch/pages_en/xssploit.html

XSSS

GPL2

Perl (5.x)

http://www.sven.de/xsss/

ZAP

ASF2

Java (1.6.x)

http://code.google.com/p/zaproxy/

01 August 2011

http://sourceforge.net/projects/xsser/files
/

http://www.owasp.org/index.php/OWASP
_Zed_Attack_Proxy_Project

Page 3 of 3