McAfee tool to check Web services security

McAfee plans to release on Tuesday a new tool designed to help users identify vulnerabilities in Web services applications. The WSDigger tool was developed by McAfee's Foundstone security services group and lets users test the security of Web services, the company said in a statement.

WSDigger will be released to the open-source community, McAfee said. The tool comes with sample attack plug-ins for SQL injection, cross-site scripting and X-PATH injection attacks. In addition, people can develop and share their own plug-ins, the security vendor said. WSDigger should be available Tuesday for download from the Foundstone Web site.