Um... Doesn't get much better than Burp. That said, it assist you; it
is not a completely hands off tool. If you want to point a scanner at
something and come back later, then go for some other product.

Matt Gardenghi

On Oct 12, 2011, at 12:26, "Derrenbacker, L. Jonathan"
<JDerrenbacker (at) kshgs (dot) com [email concealed]> wrote:

> I have budget for a web app vulnerability scanner, and I was wondering if anyone has opinions on the professional version Burp Suite with the scanner option.
> Is the scanner any good? Accurate?
>
> This is the website if anyone doesn't know what it is:
> http://portswigger.net/burp/scanner.html
>
>
>
> Thanks,
> Jon
>
> ------------------------------------------------------------------------

> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------

>

------------------------------------------------------------------------

This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[ reply ]