Pete Finnigan's Oracle Security Weblog

I had the great pleasure to meet Frank Fan in Las Vegas when I was speaking at the BlackHat conference. Frank was there to talk about his new application MatriXay which can be used to pentest web applications and databases. I have seen the application before and was interested to see a newer version. I got a good look at it before Franks talk and also went along to hear Frank speak. His presentation included a flash movie of the application used in anger. This is a great application and Frank was good enough to let me have a copy to review, I am looking forwards to having a proper look at it and running it through its paces. Franks presentation is called " http://www.dbappsecurity.com/MatriXay/MatriXay.ppt - (broken link) Improved penetration testing of Web Apps and databases with MatriXay and is well worth a look. This is the best web app scanner I have seen.