Which WebApp Security Scanner is described as searching for vulnerabilities such as SQL injection and XSS?

• A. Fortify WebInspect
• B. N-Stalker X
• C. ScanMyServer
• D. QualysGuard Malware Detection

Answer: (B)

Automated dynamic testing of web applications targets how they handle user input to find flaws attackers could exploit, like SQL injection and cross-site scripting. N-Stalker X is a web application security scanner designed to do exactly that: it actively probes a web app, crawls its pages, and tests input points with crafted payloads to reveal vulnerabilities such as SQL injection and XSS. By injecting test inputs and examining how the server responds or whether malicious data appears in outputs, it can identify where the app mishandles data or echoes input insecurely. Other tools listed either focus on different security tasks or aren’t described specifically as hunting for these web app vulnerabilities, so they don’t fit the description as precisely.