Web Application Security Scanners are automated tools to test web applications for common security problems such as Cross-Site scr ipting, SQL Injection, Directory Traversal, insecure configurations, and remote command execution vulnerabilities. These tools crawl a web application and locate application layer vulnerabilities and weaknesses, either by manipulating HTTP messages or by inspecting them for suspicious attributes.-Web Application Security Scanners are automated tools to test web applications for common security problems such as Cross-Site scr ipting, SQL Injection, Directory Traversal, insecure configurations, and remote command execution vulnerabilities.　These tools crawl a web application and locate application layer vulnerabilities and weaknesses, either by manipulating HTTP messages or by inspecting them for suspicious attributes.