Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have plans to deploy an Intranet application to the Internet. This will be running on IIS7.

Are there any tools which can simulate well known security attacks and give me advice on areas to improve? Would appreciate any good advice to stuffs I should watch out for.

share|improve this question

It's not free, but McAfee Secure will run a scan against your site whenever you want that will identify any known security issues and check for SQL injection, cross-site scripting errors, etc. It will also look for common OS and web server vulnerabilities. When it's done it will give you a report with all of the problems and suggestions and links for more information on how to correct them. We use this service to scan our e-commerce sites as part of their PCI compliance requirements.

share|improve this answer

You can test the site with lcamtuf's RatProxy for potential vulnerabilities.

share|improve this answer
interesting. thank you. – Gulzar Apr 30 '09 at 16:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.