The Input Vector Support of Web Application Scanners

The current information is based on the results of the *2011/2012/2014/2016* benchmarks (excpet for entries marked as updated or new )

Note: The content in this page is *incomplete* since the research is still in progress - the various scanners might support additional vectors.

Last updated: 18/09/2016
Sorted in a descending order according to the scanner's number of supported input vectors and the scanner name .
Hint: hover over the marks and titles to get additional information on the various features.
Note: the information refers to the ability of the scanners to scan the input vector, not simply to interpret it.
Glossary
Unified List   Commercial Scanners   Free / Open Source Scanners


#
LogoVulnerability Scanner
C
O
U
N
T
G
E
T
P
O
S
T
C
O
O
K
I
E
H
E
A
D
E
R
S
E
C
R
E
T
P
N
a
m
e
X
M
L
X
m
l
A
T
T
X
m
l
T
A
G
J
S
O
N
.
N
e
t
E
N
C
A
M
F
J
a
v
a
S
E
R
.
N
e
t
S
E
R
W
C
F
W
C
F
-
B
i
n
W
e
b
S
o
c
k
D
W
R
C
u
s
t
o
m
D
I
R
F
I
L
E
P
a
t
h
N
e
s
t
X
M
L
N
e
s
t
J
S
O
N
J
s
o
n
P
N
a
m
e
M
u
l
t
i
p
a
r
t
G
W
T
O
D
a
t
a
I
D
O
D
a
t
a
F
i
l
t
1
IronWASP13
2
arachni11
3
ZAP11
4
Netsparker Community Edition9
5
W3AF8
6
Acunetix WVS Free Edition5
7
N-Stalker 2012 Free Edition4
8
SkipFish4
9
SQLiX4
10
sqlmap4
#
LogoVulnerability Scanner
C
O
U
N
T
G
E
T
P
O
S
T
C
O
O
K
I
E
H
E
A
D
E
R
S
E
C
R
E
T
P
N
a
m
e
X
M
L
X
m
l
A
T
T
X
m
l
T
A
G
J
S
O
N
.
N
e
t
E
N
C
A
M
F
J
a
v
a
S
E
R
.
N
e
t
S
E
R
W
C
F
W
C
F
-
B
i
n
W
e
b
S
o
c
k
D
W
R
C
u
s
t
o
m
D
I
R
F
I
L
E
P
a
t
h
N
e
s
t
X
M
L
N
e
s
t
J
S
O
N
J
s
o
n
P
N
a
m
e
M
u
l
t
i
p
a
r
t
G
W
T
O
D
a
t
a
I
D
O
D
a
t
a
F
i
l
t
11
XSSer4
12
safe3wvs (limited free edition)3
13
Vega3
14
Wapiti3
15
WebCruiser Free Edition3
16
Andiparos2
17
Gamja2
18
Grabber2
19
Grendel Scan2
20
Mini MySqlat0r2
#
LogoVulnerability Scanner
C
O
U
N
T
G
E
T
P
O
S
T
C
O
O
K
I
E
H
E
A
D
E
R
S
E
C
R
E
T
P
N
a
m
e
X
M
L
X
m
l
A
T
T
X
m
l
T
A
G
J
S
O
N
.
N
e
t
E
N
C
A
M
F
J
a
v
a
S
E
R
.
N
e
t
S
E
R
W
C
F
W
C
F
-
B
i
n
W
e
b
S
o
c
k
D
W
R
C
u
s
t
o
m
D
I
R
F
I
L
E
P
a
t
h
N
e
s
t
X
M
L
N
e
s
t
J
S
O
N
J
s
o
n
P
N
a
m
e
M
u
l
t
i
p
a
r
t
G
W
T
O
D
a
t
a
I
D
O
D
a
t
a
F
i
l
t
21
N-Stalker 2009 Free Edition2
22
Oedipus2
23
openAcunetix2
24
Paros Proxy2
25
PowerFuzzer2
26
ProxyStrike2
27
Sandcat Free Edition2
28
ScreamingCSS2
29
Secubat2
30
Syhunt Mini (Sandcat Mini)2
#
LogoVulnerability Scanner
C
O
U
N
T
G
E
T
P
O
S
T
C
O
O
K
I
E
H
E
A
D
E
R
S
E
C
R
E
T
P
N
a
m
e
X
M
L
X
m
l
A
T
T
X
m
l
T
A
G
J
S
O
N
.
N
e
t
E
N
C
A
M
F
J
a
v
a
S
E
R
.
N
e
t
S
E
R
W
C
F
W
C
F
-
B
i
n
W
e
b
S
o
c
k
D
W
R
C
u
s
t
o
m
D
I
R
F
I
L
E
P
a
t
h
N
e
s
t
X
M
L
N
e
s
t
J
S
O
N
J
s
o
n
P
N
a
m
e
M
u
l
t
i
p
a
r
t
G
W
T
O
D
a
t
a
I
D
O
D
a
t
a
F
i
l
t
31
Uber Web Security Scanner2
32
VulnDetector2
33
WATOBO2
34
WebScarab2
35
WebSecurify (Opensource Version)2
36
WSTool2
37
Xcobra2
38
XSSploit2
39
XSSS2
40
aidSQL1
#
LogoVulnerability Scanner
C
O
U
N
T
G
E
T
P
O
S
T
C
O
O
K
I
E
H
E
A
D
E
R
S
E
C
R
E
T
P
N
a
m
e
X
M
L
X
m
l
A
T
T
X
m
l
T
A
G
J
S
O
N
.
N
e
t
E
N
C
A
M
F
J
a
v
a
S
E
R
.
N
e
t
S
E
R
W
C
F
W
C
F
-
B
i
n
W
e
b
S
o
c
k
D
W
R
C
u
s
t
o
m
D
I
R
F
I
L
E
P
a
t
h
N
e
s
t
X
M
L
N
e
s
t
J
S
O
N
J
s
o
n
P
N
a
m
e
M
u
l
t
i
p
a
r
t
G
W
T
O
D
a
t
a
I
D
O
D
a
t
a
F
i
l
t
41
crawlfish1
42
Damn Small SQLi Scanner (DSSS)1
43
iScan1
44
JSky Free Edition1
45
LoverBoy1
46
Priamos1
47
Scrawlr1
48
SQID (SQL Injection Digger)1
49
Web Injection Scanner (WIS)1


Statistics
#
G
E
T
P
O
S
T
C
O
O
K
I
E
H
E
A
D
E
R
S
E
C
R
E
T
P
N
a
m
e
X
M
L
X
m
l
A
T
T
X
m
l
T
A
G
J
S
O
N
.
N
e
t
E
N
C
A
M
F
J
a
v
a
S
E
R
.
N
e
t
S
E
R
W
C
F
W
C
F
-
B
i
n
W
e
b
S
o
c
k
D
W
R
C
u
s
t
o
m
D
I
R
F
I
L
E
P
a
t
h
N
e
s
t
X
M
L
N
e
s
t
J
S
O
N
J
s
o
n
P
N
a
m
e
M
u
l
t
i
p
a
r
t
G
W
T
O
D
a
t
a
I
D
O
D
a
t
a
F
i
l
t
Scanners:493913122344050000000021141004111



Glossary
AliasGeneral FeatureDescriptionReferences
GETHTTP Query String ParametersInput parameters sent in the URL1
POSTHTTP Body ParametersInput parameters sent in the HTTP body1
COOKIEHTTP Cookie ParametersInput parameters sent in the HTTP cookie1
HEADERHTTP HeadersHTTP request headers used by the application1
SECRETSecret HTTP ParametersNon-visible valid HTTP parameters (such as GET to POST, etc)
PNameHTTP Parameter NamesHTTP parameter names used by the application
XMLXML Element ContentThe content of XML elements1
XmlATTXML AttributesXML attributes1
XmlTAGXML TagsThe names of XML tags1
JSONJSON ParametersParameters sent in JSON format1
.NetENC.Net PostBack Encoded ParametersParameters sent after undergoing .net PostBack encoding1
AMFFlash Action Message FormatParameters sent in Flash AMF format1
JavaSERJava Serialized ObjectsParameters sent within Java serialized objects1
.NetSER.Net Serialized Objects / RemotingParameters sent within .Net serialized objects / remoting1
WCF.Net WCF ObjectsParameters sent in WCF requests1
WCF-Bin.Net Binary WCF ObjectsParameters sent in binary WCF requests1
WebSockHTML5 WebSocketsDirect Socket Browser-Server Communication1
DWRJava Direct Web RemotingParameters sent in DWR format1
CustomCustom Input VectorSupport for defining custom input vectors in the HTTP request
DIRDirectory Name Input VectorSupport for scanning the directory section in the HTTP URL
FILEFile Name Input VectorSupport for scanning the file name section (without extension) in the HTTP URL
PathHTTP Path Input VectorSupport for appending to and scanning the HTTP path
NestXMLNested XML In Parameter Input VectorSupport for scanning XML components which are nested in other parameters
NestJSONNested JSON In Parameter Input VectorSupport for scanning JSON components which are nested in other parameters
JsonPNameJSON Parameter Name Input VectorSupport for scanning JSON parameter names
MultipartMultipart Input VectorSupport for scanning Multipart values1
GWTGWT Input VectorSupport for scanning input sent in GWT (Google Web Toolkit) format1
ODataIDOData Id Input VectorSupport for scanning OData ID Values1
ODataFiltOData Filter Input VectorSupport for scanning OData Filter Values1



Copyright © 2010-2015 by Shay Chen. All rights reserved.
Click here to learn how this information may be published or reused.