Have you look at this site?
http://sectooladdict.blogspot.ca/2012/07/2012-web-application-scanner-benchmark.html

Very good information can be found there about web application vulnerability scanners!!

this might help:

http://www.notsosecure.com/folder2/2011/07/06/appsecusa-ctf-another-write-up/

Hi all,

I'm having trouble making SQL injection work with an INSERT statement and I'm not sure what I'm doing wrong. The PHP code for the SQL request looks like this:

mysql_query("INSERT INTO txtcomment (id,comment) VALUES ('" . $_POST['id'] . "','" . $_POST['comment']. "')")

Whenever I try to insert into the comment field, it doesn't seem to work. If I attempt to insert into the ID field, it gives me the error "ERROR: Data truncated for column "id" at row 1". It does that even if I just add a ' to the id parameter. If I put a character other than a number into the ID field, I get the error "ERROR: Out of range value adjusted for column "id" at row 1".

When I attempt in the comment field, my whole query goes into the database, special characters and all. There doesn't seem to be any escaping done in the PHP code, so I can't tell why I can't get it to work.
Any obvious mistakes I'm making?

Wife and I have been chatting about moving out of glorious CT and heading down south to FL.  I think after the last couple winters, I may be ready for that change.  So I started peaking at the job boards for the Orlando area and there do seem to be some opportunities.  Just curious if anyone has any suggestions or may know of any additional opportunities for that area.  Another possibility with moving to FL is that the wife would be more tolerant of work related travel.  So I would be open to positions that do not require me to be in any particular geographic location. 

Thanks for your assistance!

Try this: http://comments.gmane.org/gmane.comp.security.scapy.general/4737

You don't need to learn a scripting language for OSCP, as you would only use basic scripts for buffer overflow and overall scripting only forms 5% of the course.
But if you have the time and will to learn, it will help you in the future..good luck..

@ ajohnson
   from scapy import *
The above statement output :
  ImportError: No module named all.

See below:

File "/Users/user/Desktop/ex09.py", line 3, in <module>
    from scapy import * 
  File "/Users/user/Desktop/scapy.py", line 4, in <module>
    from scapy.all import * 
ImportError: No module named all
logout
 
Thanks for the reply and I am still stucked here

It's a difference between versions.

Believe it or not, all went so well, that I even forgot to come back to this thread and let everyone know. Now if the big conversion goes that well, then I think I'll play the lottery soon afterwards.

Don

hmmm I had no issues running this as is on KALI. Adding to from scapy import * did generate an error.