Scanning for vulnerable websites

[God Like]

looking for a good scanner which can tell me if a website has mysql vulnerabilities...whats the best one, if a application like this exists

thanks

[eSparq]

I would tend to use Google for this. You type in
"application name" version vulnerability

And it'll pop up any known, published vulnerabilities for that particular version of the software. Chances are that if there's a known vulnerability, it's been posted on the security lists and archived on numerous sites.

Now, if you want *unpublished* vulnerabilities or vulnerabilities in custom software/scripts, you'll have to work a lot harder....

[kirby]

Scan a ip range~ thats the best way. It's what those chinese do to find anonymous FTP and use them.

[Syphilis]

Nmap is good for scanning large IP ranges.

sudo nmap -v -sP xxx.xxx.*.*

Wildcards will scan the entire IP range. The code above scans 65536 IP addresses.

Nessus will go into even more detail. Remember that they'll be able to detect your IP address connecting to them.