Software Application Security Services (SASS) Tools


» WSDigger v1.0 Released 7/12/2005


Copyright 2005 (c) by Foundstone, Inc.
http://www.foundstone.com

WSDigger is a free open source tool designed by Foundstone to automate black-box web services security testing (also known as penetration testing). WSDigger is more than a tool, it is a web services testing framework. Version one of this framework contains sample attack plug-ins for SQL injection, cross site scripting and XPATH injection attacks. A web service vulnerable to XPATH injection is provided as an example with the tool. By releasing the framework as an open-source tool, users are encouraged to develop and share their own plug-ins.

System Requirements

Windows .NET Framework (Click here to download now.)