0x90 Posted October 8, 2006 Report Posted October 8, 2006 Wapiti allows you to audit the security of your web applications.Wapiti can detect the following vulnerabilities :File Handling Errors (Local and remote include/require, fopen, readfile...)Database Injection (PHP/JSP/ASP SQL Injections and XPath Injections)XSS (Cross Site Scripting) InjectionLDAP InjectionCommand Execution detection (eval(), system(), passtru()...)CRLF Injection (HTTP Response Splitting, session fixation...)hxxp://wapiti.sourceforge.net/ Quote