Joe Stagner posted about some great tools that you can use to help with SQL Injection. This is the topic of our blog chat coming up, I haven’t set a firm date as I am trying to get as many folks to attend as I can from the Microsoft side.
Check out his post: Tools to block and eradicate SQL injection
You will find out about a tool HP created to scan for SQL Injection, a way to block it from happening from IIS and a security advisory from Microsoft as well. It also mentions the Source Code Analyzer that web developers can use.
More information on these tools can be found at our security advisory.
I’ll try to get the chat finalized soon and let you know when it will be. I’m looking forward to it.