I'm running Acunetix to test my ASP.NET page and when it gets to the SQL injection tests it says nothing is wrong. But some data is still being added to my database.
Is there any way to see what queries Acunetix is executing when it runs tests? That would give me a better idea of what's going on and why I'm getting data inserted.
I have tried with Fiddler to see HTTP traffic but without success. I also tried WireShark sniffer and I could see the packets but, the protocol I'm using is HTTPS so that didn't bring so much information.