Tell me more ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.
up vote 1 down vote favorite

I'm running Acunetix to test my ASP.NET page and when it gets to the SQL injection tests it says nothing is wrong. But some data is still being added to my database.

Is there any way to see what queries Acunetix is executing when it runs tests? That would give me a better idea of what's going on and why I'm getting data inserted.

I have tried with Fiddler to see HTTP traffic but without success. I also tried WireShark sniffer and I could see the packets but, the protocol I'm using is HTTPS so that didn't bring so much information.

share|improve this question

3 Answers

up vote 1 down vote

i have already solved this issue, acunetix has a Vulnerability Editor tool that shows me what are the queries it's using so i know what was the problem now

share|improve this answer
up vote 0 down vote

You can enable HTTP logging from the Logging settings node. It will log all the http requests and responses to a file httplog in the logs sub directory. From there you can analyse all the traffic.

share|improve this answer
thanks, i will try that, you are the only person who has answered me, i also posted this in another forums and got no answer, nevertheless it seems a simple task, i will give it a try. thanks again – Paulo Bu Mar 4 '11 at 1:29
up vote 0 down vote

You need to configure Fiddler as proxy and it'll work just fine.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.