XSSOOPS a security and performance analysis tool.
Its job is to analyze and application by emulating the steps a hacker may
take while trying to gain access to unauthorized information or obtain
privileged access. By doing so, it can detect many of the common security
vulnerabilities such as cross site scripting, SQL injection and so on.
The information gathered, provides invaluable resource that can clearly
identify existing security problems, demonstrate their potential
exploitation routes and provide means of testing for the same problem in the
future.
In addition to tracking down security problems, XSSOOPS analyzes the data
downloaded from the tested site and provides a report identifying the slow
portions of the application. This clearly identifies potential performance
bottlenecks providing a clear and concise application optimization route.
Furthermore XSSOOPS can work as a link checker, logging all broken or
non-valid links found on the site. Any such links are tracked in addition to
the page that has generated the broken link to provide all information
necessary locate and resolve such problems.