FAQ of WebCruiser - Web Vulnerability Scanner

Q: Why I can not run WebCruiser on my computer?
A: It need Windows with .Net Framework 2.0 or higher, if you have not installed .Net Framework, please download it from microsoft web site. Usually, Windows XP and earlier has not .Net Framework installed, but Windows Vista and Windows 7 has .Net Framework Integrated already. You can Download .NET FrameWork V2.0 From Microsoft.

Q: I don't know how to use WebCruiser?
A: User Guide is available from:
1.User Guide(PDF, 2.7MB)
2.User Guide(CHM, 896KB)
3.Online User Guide

Q: What is the difference between the Professional and Enterprise Edition ?
A: They are different in License type.
Professional Edition is for non-commercial use, such as security professionals, masters of individual websites etc., 12-month update and support service, no function limit;
Enterprise Edition is for commercial use, such as enterprises, institution, or commercial organizations, 12-month update and support service with top priority, no function limit. The professional edition and the enterprise edition are all full function editions.

Function      \     Edition Professional Enterprise
Commercial License No Yes
Directories Crawler Yes Yes
Vulnerabilities Scanning Yes Yes
SQL Server Injection Yes Yes
MySQL Injection Yes Yes
Oracle Injection Yes Yes
DB2 Injection Yes Yes
Advanced Injection Yes Yes
Access Injection Yes Yes
Access Dictionary Edit Yes Yes
Cross-Site Scripting Yes Yes
XPath Injection Yes Yes
Post Resend Yes Yes
Multi-Site Scanning Yes Yes
Sensitive WebSites Scanning Yes Yes
Cookie Tool Yes Yes
Report Yes Yes
Technical Support 12-month 12-month

Q: What is SQL Injection?
A: SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another. SQL Injection is one of the most common application layer attack techniques used today. SQL Injection Introduction(PDF)

Q: What is XPath Injection?
A: Please refer to http://sec4app.com/download/XPathInjection.pdf .