Google Online Security Blog: Meet skipfish, our automated web security scanner

Meet skipfish, our automated web security scanner

2010년 3월 19일

Posted by Michal ZalewskiratproxyBrowser Security Handbookimprove the security of third-party browsersskipfish

High speed: written in pure C, with highly optimized HTTP handling and a minimal CPU footprint, the tool easily achieves 2000 requests per second with responsive targets.

Ease of use: the tool features heuristics to support a variety of quirky web frameworks and mixed-technology sites, with automatic learning capabilities, on-the-fly wordlist creation, and form autocompletion.

Cutting-edge security logic: we incorporated high quality, low false positive, differential security checks capable of spotting a range of subtle flaws, including blind injection vectors.

ratproxyskipfishthis pageavailable here

댓글 11개 :

익명 :: This is cool and all but Google, you really need to figure out how to protect against social engineering attacks.; 2010년 3월 20일 오후 12:01
Mark R :: Keep them coming. Great to see some new tools for us to use.; 2010년 3월 20일 오후 2:01
Unknown :: Your "Browser Security Handbook" is NOT a "handbook", or any kind of book at all. It is a wiki! There is a pretty damned big difference.

I understand the utility of a wiki, but don't call things what they are not.; 2010년 3월 21일 오후 8:55
Justin Freid :: The tool runs beautifully.
Thanks.; 2010년 3월 22일 오전 2:37
익명 :: why there's no code in svn?; 2010년 3월 22일 오후 6:40
익명 :: any plans to support NSS besides/instead of OpenSSL?

any plans to support windows? i've tried hard to compile it with msvc, mingw and cygwin. all failed. cygwin at least compiles, but fails to link. msvc support would be very nice.; 2010년 3월 22일 오후 6:54
익명 :: um never mind the question about windows support, i got it compile under cygwin, i just had to use the cygwin builds of libidn, openssl and zlib.; 2010년 3월 22일 오후 8:17
익명 :: hi, i've setted up a page for my windows builds of skipfish:

http://nss.daydreamer.nu/?q=node/16

enjoy!; 2010년 3월 22일 오후 9:40
Unknown :: Nice work again Google. Very cool.

@Lonny Man, you've really got to learn to chill out. Google have written a handbook in Wiki form, but it's still a handbook. ;); 2010년 3월 23일 오후 9:36
itsbobby :: Running the tool now, my local server doesn't seem to be able to respond to 2000 requests a second though! More like 4!; 2010년 8월 10일 오전 5:23
Unknown :: Hi,

Can someone here please tell me how to run skipfish on windows vista.

I have been told to do a research on this tool. But I dont understand what am supposed to do. People say we can do it with cgywin for windows user. But I have no idea wat to do with cgywin. Can someone please tell me how to get it run?

Please dont say open cgywin and type ./skipfish - H..... something like this.

Thanks.; 2011년 4월 25일 오전 6:32

댓글 쓰기

Security Blog

Meet skipfish, our automated web security scanner

댓글 11개 :

태그

Archive

Feed