WebKnight is a free open source tool that comes to the rescue on many occasions and it helps administrators in their jobs, but to keep up this good work, please consider a donation.
WebKnight Downloads
Robots.xml: the latest version of the Robots.xml file used by WebKnight. Download and overwrite the existing file in your WebKnight folder to have the latest database of known robots. WebKnight will automatically detect the new file and load it.
Improved support for 64bit and IIS 7 and ISA Server. Improved logging with multiple log files concurrently (Per Process Owner Logging). Improved support for reverse proxy/CDN systems, you can specify which server variable to use to get the client IP address. This version comes with ISA Server installer script for installing WebKnight inside ISA Server 2000/2004/2006.
Extended scanning engine with new features like general querystring/data/cookie variable length and ripping protection for certain file types. Added lots of SQL keywords for improved SQL injection scanning.
A new version of the config utility, log reader application and updated robots database is also included in this release.
WebKnight 2.2 (Release date: 2008.09.02)
This release is ready for IIS 7 and 64-bit. Fixed a few minor issues and extended scanning for SQL injection in the referrer, extended cookie scanning and certain XSS attacks. It is now also possible to monitor or block an IP address after an alert has been triggered. A new version of the config utility, log reader application and updated robots database is also included in this release.
WebKnight 2.1 (Release date: 2007.10.08)
This is mainly a bug fix release of version 2.0. There was an issue with running WebKnight 2.0 on systems that are non-Latin (like Korean). This is fixed in this release and users running version 2.0 are strongly recommended to upgrade to this version. Version 1.3 and below is not affected by this bug. You can now also exclude certain IP addresses or ranges from scanning. A new version of the log reader application and updated robots database is also included in this release.
WebKnight 2.0 (Release date: 2006.12.24)
This is a major revision with support for blocking certain robots (a large robot database is provided), user agent scanning, referrer header scanning (with hotlinking blocking), connection control, authentication scanning and improved compatibility with web applications. Fixed a few bugs involving IIS 6. A log reader application and an improved configuration editor is also provided.
WebKnight 1.3 (Release date: 2003.11.10) Added an additional layer of protection by scanning the url in more than 1 event and checking the url for RFC compliance and improved scanning for encoding abuse in the url, logging can now be done in GMT/UTC or local time, fixed some compatibility issues and a few minor bugs: SQL injection scanning was too restrictive and fixed bug where the settings file would get corrupted and WebKnight would use its default settings.
WebKnight 1.2 (Release date: 2003.09.08) Switched to GMT/UTC logging, made the WebKnight log file more compatible with log analysis/reporting tools, added one extra security feature: Allowed HTTP Versions, removed a few minor bugs and removed one major bug involving SSL.
WebKnight 1.1 (Release date: 2003.07.14) Added some extra security measures, removed a few bugs, removed some compatibility issues with ASP.NET,... Users running this version of WebKnight are advised to upgrade to the latest version.
WebKnight 1.0 (Release date: 2003.03.24) First official release Users running this version of WebKnight are advised to upgrade to the latest version.