ARTICLE OWASP Code Crawler v2.7 released

Thursday 22 April 2010 - 1149 read - ( Keywords : Code Auditing , Code Crawler , Configurations checks , Owasp )

A tool aimed at assisting code review practitioners. It is a static code review tool which searches for key topics within .NET and J2EE/JAVA code. The aim of the tool is to accompany the OWASP Code review Guide and to implement a total code review solution for "everyone".

JPG - 5.3 kb

Version 2.7

- Removed unused References and Objects
- Reduced Noise (.NET Files)
- Replaced old scanning engine with new multi step engine (Only Stage 1 is active in this release for Single File Scan Only)
- New DarkMoon IDE Theme
- Single Scan Window : Mark a Threat as False positive (remove Highlighting, remove threat from ThreatCollection object)
- Bug Fixing

More information: here


POSTSCRIPTUM

Download OWASP Code Crawler v2.7


COMPLIANCE MANDATES

Code Auditing : PCI/DSS 6.3.6, 6.3.7, 6.6, SOX A12.8, GLBA 16CFR Part 314.4(b) and (2);FISMA RA-5, SC-18, SA-11 SI-2, and ISO 27001/27002 (12.4.1, 12.4.3, 12.5)


RELATED ARTICLES

Code Auditing, Code Crawler, Configurations checks, Owasp,

22 April 2010 : OWASP Code Crawler v2.7 released
31 January 2010 : OWASP Code Crawler updated to v2.5.1
24 January 2010 : OWASP Code Crawler v2.5 released
6 October 2009 : Code Crawler v2.4 Beta - OWASP Code Review Tool
19 April 2010 : [PDF] OWASP Top 10 for 2010 Final Version
21 January 2010 : OWASP TOP 10 2010 French version released
16 July 2009 : OWASP Security Spending Benchmarks reports available
19 June 2009 : OWASP Joomla Vulnerability Scanner v0.0.1 released
12 January 2009 : OWASP Testing Guide version 3.0 released