In response to the recent mass SQL injection attacks, Microsoft has developed a new static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Web developers can run the tool on their ASP source code to identify the root cause of the attack and address them to reduce their exposure to future attacks. The tool will scan ASP source code and generate warnings related to first order and second order SQL Injection vulnerabilities. The tool also provides annotation support that can be used to improve the analysis of the code.
So, for those of you that still have Classic ASP site, this tool would be good option to download and run against your site to see if it has any SQL Injection vulnerabilities.
You can download the tool by clicking here.
152b6ffa-aa10-4af8-8ef8-b60f20fd24b5|0|.0