|
|
(11 intermediate revisions by 3 users not shown) |
Line 1: |
Line 1: |
− | == (WORK IN PROGRESS) == | + | {| |
| + | |- |
| + | ! width="700" align="center" | <br> |
| + | ! width="500" align="center" | <br> |
| + | |- |
| + | | align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]] |
| + | | align="right" | |
| | | |
− | {{:Project_Information:template}} | + | |} |
− | | + | {{:Project Information:template SKAVENGER}} |
− | {| style="width:100%" border="0" align="center"
| + | [[Category:OWASP Project|Skavenger Project]] |
− | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION'''
| + | [[Category:OWASP Tool]] |
− | |-
| + | [[Category:OWASP Download]] |
− | | style="width:15x%; background:white" align="center"|
| + | [[Category:OWASP Alpha Quality Tool]] |
− | | colspan="4" style="width:85%; background:white" align="center"|<font color="black">'''SKAVENGER'''
| |
− | |-
| |
− | | style="width:15%; background:#7B8ABD" align="center"| '''Short project description'''
| |
− | | colspan="6" style="width:85%; background:#cccccc" align="left"|Skavenger is a web application security assessment toolkit which arised from many years of professional experience in the web application assessment field and is the result of nearly one your of work. It passively analyzes traffic logged by various MITM proxies (such as WebScarab and Burp) as well as other sources (like Firefox's LiveHTTPHeader plugin) and helps to identify various kinds of possible vulnerabilities (such as XSS, CRLF injection, an insecure session management and several kinds of information disclosure). Skavenger's modular design allows the integration of custom scanning modules without any knowledge about the tool at all. Skavenger is completely written in Perl and can be downloaded from [https://sourceforge.net/projects/skavenger/ Skavenger.]
| |
− | |-
| |
− | | style="width:15x%; background:#7B8ABD" align="center"|'''Email contacts'''
| |
− | |style="width:17%; background:#cccccc" align="center"|Project leader<br>[mailto:mro(at)securenet.de '''Matthias Rohr''']
| |
− | |style="width:17%; background:#cccccc" align="center"|[mailto:to(at)change '''Project mailing list''']
| |
− | |style="width:17%; background:#cccccc" align="center"|First Reviewer<br>[mailto:to(at)change '''Name&Email''']
| |
− | |style="width:17%; background:#cccccc" align="center"|Second Reviewer<br>[mailto:to(at)change '''Name&Email''']
| |
− | |style="width:17%; background:#cccccc" align="center"|OWASP Board Member<br>Non applicable
| |
− | |-
| |
− | | style="width:15x%; background:white" align="center"|
| |
− | | colspan="4" style="width:85%; background:white" align="center"|<font color="black">'''Sponsor - '''[[OWASP Summer of Code 2008|'''OWASP Summer of Code 2008''']]
| |
− | |}
| |
− | {| style="width:100%" border="0" align="center"
| |
− | ! colspan="5" align="center" style="background:#4058A0; color:white"|ASSESSMENT AND REVIEW PROCESS
| |
− | |-
| |
− | | style="width:15%; background:#ffffff align="center"|
| |
− | | style="width:21%; background:#C2C2C2" align="center"|'''Author's Self Evaluation'''
| |
− | | style="width:21%; background:#C2C2C2" align="center"|'''First Reviewer'''
| |
− | | style="width:21%; background:#C2C2C2" align="center"|'''Second Reviewer'''
| |
− | | style="width:22%; background:#C2C2C2" align="center"|'''OWASP Board Member'''
| |
− | |-
| |
− | | style="width:15%; background:#7B8ABD" align="center"|'''50% Review'''
| |
− | | style="width:21%; background:#C2C2C2" align="center"|Objectives&Deliveries Reached?<br>'''YES/NO'''<br>See/Edit Self-Evaluation (a)
| |
− | | style="width:21%; background:#C2C2C2" align="center"|Objectives&Deliveries Reached?<br>'''YES/NO'''<br>See/Edit First Review (c)
| |
− | | style="width:21%; background:#C2C2C2" align="center"|Objectives&Deliveries Reached?<br>'''YES/NO'''<br>See/Edit Second Review (e)
| |
− | | style="width:22%; background:#C2C2C2" align="center"|Non applicable
| |
− | |-
| |
− | | style="width:15%; background:#7B8ABD" align="center"|'''Final Review'''
| |
− | | style="width:21%; background:#C2C2C2" align="center"|Objectives&Deliveries Reached?<br>'''YES/NO'''<br>Beta Status Reached?<br>'''YES/NO'''<br>See/Edit Self-Evaluation (b)
| |
− | | style="width:21%; background:#C2C2C2" align="center"|Objectives&Deliveries Reached?<br>'''YES/NO'''<br>Beta Status Reached?<br>'''YES/NO'''<br>See/Edit Self-Evaluation (d)
| |
− | | style="width:21%; background:#C2C2C2" align="center"|Objectives&Deliveries Reached?<br>'''YES/NO'''<br>Beta Status Reached?<br>'''YES/NO'''<br>See/Edit Self-Evaluation (f)
| |
− | | style="width:22%; background:#C2C2C2" align="center"|Non applicable
| |
− | |-
| |
− | |}
| |
− | | |
− | | |
− | | |
− | [[Category:OWASP Project]] | |