FAQ of WebCruiser - Web Vulnerability Scanner
Q: Why I can not run WebCruiser on my computer?
A: It need Windows with .Net Framework 2.0 or higher, if you have not installed .Net Framework, please download it from microsoft web site. Usually, Windows XP and earlier has not .Net Framework installed, but Windows Vista and Windows 7 has .Net Framework Integrated already. You can Download .NET FrameWork V2.0 From Microsoft.
Q: I don't know how to use WebCruiser?
A: User Guide is available from:
1.User Guide(PDF, 2.7MB)
2.User Guide(CHM, 896KB)
3.Online User Guide
Q: What is the difference between the Professional and Enterprise Edition ?
A: They are different in License type.
Professional Edition is for non-commercial use, such as security professionals, masters of individual websites etc., 12-month update and support service, no function limit;
Enterprise Edition is for commercial use, such as enterprises, institution, or commercial organizations, 12-month update and support service with top priority, no function limit. The professional edition and the enterprise edition are all full function editions.
| Function \ Edition | Professional | Enterprise |
| Commercial License | No | Yes |
| Directories Crawler | Yes | Yes |
| Vulnerabilities Scanning | Yes | Yes |
| SQL Server Injection | Yes | Yes |
| MySQL Injection | Yes | Yes |
| Oracle Injection | Yes | Yes |
| DB2 Injection | Yes | Yes |
| Advanced Injection | Yes | Yes |
| Access Injection | Yes | Yes |
| Access Dictionary Edit | Yes | Yes |
| Cross-Site Scripting | Yes | Yes |
| XPath Injection | Yes | Yes |
| Post Resend | Yes | Yes |
| Multi-Site Scanning | Yes | Yes |
| Sensitive WebSites Scanning | Yes | Yes |
| Cookie Tool | Yes | Yes |
| Report | Yes | Yes |
| Technical Support | 12-month | 12-month |
Q: What is SQL Injection?
A: SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another. SQL Injection is one of the most common application layer attack techniques used today. SQL Injection Introduction(PDF)
Q: What is XPath Injection?
A: Please refer to http://sec4app.com/download/XPathInjection.pdf .
Active forum topics
- SQL Injection Tutorial
- A genuine AES-256 file encryption software - Janus File Strongbox
- About Janus Security
- What is the shortage of WebCruiser Web Vulnerability Scanner?
- Logs in WebCruiser
- WebCruiser got 5 stars from www.geardownload.com
- What is WebCruiser?
- WebCruiser Web Vulnerability Scanner User Guide V2.0
- WebCruiser - Web Vulnerability Scanner, Editor's Review from www.softsea.com
- WebCruiser - Web Vulnerability Scanner, Editor's Review from www.freedownloadscenter.com
