What software tools are good for testing for sql injection vulnerabilities,etc..?
Are any of them open-source?
Are they installed on the site or run from the desktop?

Thank you
E