Commercial Tools





Commercial Tools

Commercial tools are available that operate quite well in this space. In some cases the Web services functionality was built in as part of an entire enterprise approach; in other cases the tool is specifically for Web service testing.

WebInspect, covered in the following section, is an excellent example of a commercial product that pays specific attention to Web services.

WebInspect

One of the options within WebInspect, a product from S.P.I. Dynamics Incorporated, is to audit Web services. The tool provides you with both options in terms of manually probing services (via SOAP Editor) or it fuzzing on your behalf automatically. Figure should give you a good idea of what this tool does. It represents a finished scan using WebInspect’s automated functionality.

Image from book
Figure

Its export (for documentation) options are excellent and shown in Figure.

Image from book
Figure

Here are two other commercial tools worth looking into:

Previous Section
Next Section


 Python   SQL   Java   php   Perl 
 game development   web development   internet   *nix   graphics   hardware 
 telecommunications   C++ 
 Flash   Active Directory   Windows