Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Customers can run the tool on their ASP source code to help identify code paths that are vulnerable to SQL Injection attacks.
Perform the following steps to download and install the Microsoft Source Code Analyzer for SQL Injection:
1. Download msscasi_asp_pkg.exe to a temporary directory.
2. Run msscasi_asp_pkg.exe.
3. Enter an installation directory when prompted.
4. After extracting the files, read the usage section of the Readme.htm file for next steps.
Download Code Analyzer
Abstract courtesy : Microsoft
Reference : Pinal Dave (https://blog.sqlauthority.com)
3 Comments. Leave new
Hi There,
Does this tool support Asp.net C#?
Cheers
Stephen
can it be run in sql server 2005
Pinal,
I have a procedure code that can avoid SQL Injection with the help of derived table
Refer this for more details