Tools for decoding SQL injection attempts, locating vulnerabilities

Question

I would like to decode their hex requests, what tools would I need?

Also- are there good automated pen-test tools to explore possible vulnerabilities in my code? I assume these exist as the requests I received were too rapid to be manual.

Sample request:

action=999999.9)+%2f**%2fuNiOn%2f**%2faLl+%2f**%2fsElEcT+0x393133353134353632312e39,0x393133353134353632322e39,0x393133353134353632332e39,0x393133353134353632342e39,0x393133353134353632352e39,0x393133353134353632362e39,0x39313335313

Answer 1

Tools include:

• WebScarab

• Paros Proxy

• sqlmap

• BSQL Hacker

Articles:

• Top 15 free SQL Injection Scanners

• Comparing SQL Injection Detection Tools Using Attack Injection: An Experimental Study
  (requires IEEE login)

• Web application security: Testing for vulnerabilities (IBM.com)