This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Project Information:template SKAVENGER"
(updated related projects) |
m (RM - Minor correction "year" not "your") |
||
| (2 intermediate revisions by one other user not shown) | |||
| Line 7: | Line 7: | ||
| style="width:15%; background:#7B8ABD" align="center"| '''Short Project Description''' | | style="width:15%; background:#7B8ABD" align="center"| '''Short Project Description''' | ||
| colspan="7" style="width:85%; background:#cccccc" align="left"| | | colspan="7" style="width:85%; background:#cccccc" align="left"| | ||
| − | Skavenger is a web application security assessment toolkit which arised from many years of professional experience in the web application assessment field and is the result of nearly one | + | Skavenger is a web application security assessment toolkit which arised from many years of professional experience in the web application assessment field and is the result of nearly one year of work. It passively analyzes traffic logged by various MITM proxies (such as WebScarab and Burp) as well as other sources (like Firefox's LiveHTTPHeader plugin) and helps to identify various kinds of possible vulnerabilities (such as XSS, CRLF injection, an insecure session management and several kinds of information disclosure). Skavenger's modular design allows the integration of custom scanning modules without any knowledge about the tool at all. |
|- | |- | ||
| style="width:15%; background:#7B8ABD" align="center"|'''Key Project Information''' | | style="width:15%; background:#7B8ABD" align="center"|'''Key Project Information''' | ||
| Line 16: | Line 16: | ||
License<br>[http://sourceforge.net/softwaremap/trove_list.php?form_cat=15 '''GNU General Public License'''] | License<br>[http://sourceforge.net/softwaremap/trove_list.php?form_cat=15 '''GNU General Public License'''] | ||
| style="width:14%; background:#cccccc" align="center"| | | style="width:14%; background:#cccccc" align="center"| | ||
| − | Project Type<br>[[:Category:OWASP_Project# | + | Project Type<br>[[:Category:OWASP_Project#Beta Status Projects|'''Tool''']] |
| style="width:15%; background:#cccccc" align="center"|Sponsor<br>[[OWASP Summer of Code 2008|'''OWASP SoC 08''']] | | style="width:15%; background:#cccccc" align="center"|Sponsor<br>[[OWASP Summer of Code 2008|'''OWASP SoC 08''']] | ||
|} | |} | ||
| Line 25: | Line 25: | ||
|- | |- | ||
| style="width:29%; background:#cccccc" align="center"| | | style="width:29%; background:#cccccc" align="center"| | ||
| − | + | '''[[:Category:OWASP Project Assessment#Beta Quality Tool Criteria|Beta Quality]]'''<br>[[:Category:OWASP Skavenger Project - Assessment Frame|Please see here for complete information.]] | |
| style="width:42%; background:#cccccc" align="center"| | | style="width:42%; background:#cccccc" align="center"| | ||
The tool is written in C# with .NET 2.0 WinForms (for the GUI) as well as Perl (for the CLI) and can be downloaded from [https://sourceforge.net/projects/skavenger/ sourceforge.net] | The tool is written in C# with .NET 2.0 WinForms (for the GUI) as well as Perl (for the CLI) and can be downloaded from [https://sourceforge.net/projects/skavenger/ sourceforge.net] | ||
Latest revision as of 13:37, 12 February 2010
| PROJECT IDENTIFICATION | |||||||
|---|---|---|---|---|---|---|---|
| Project Name | OWASP Skavenger Project | ||||||
| Short Project Description |
Skavenger is a web application security assessment toolkit which arised from many years of professional experience in the web application assessment field and is the result of nearly one year of work. It passively analyzes traffic logged by various MITM proxies (such as WebScarab and Burp) as well as other sources (like Firefox's LiveHTTPHeader plugin) and helps to identify various kinds of possible vulnerabilities (such as XSS, CRLF injection, an insecure session management and several kinds of information disclosure). Skavenger's modular design allows the integration of custom scanning modules without any knowledge about the tool at all. | ||||||
| Key Project Information | Project Leader Matthias Rohr |
Project Contributors (if any) |
Mailing list Subscribe here Use here |
License |
Project Type |
Sponsor OWASP SoC 08 | |
| Release Status | Main Links | Related Projects |
|---|---|---|
|
The tool is written in C# with .NET 2.0 WinForms (for the GUI) as well as Perl (for the CLI) and can be downloaded from sourceforge.net |
OWASP WebScarab Project |
