Security Dashboard
Security vDNA
Saturday 6 March 2010 - 828 read - ( Keywords : Application Scanner , Configurations checks , Vulnerability Scanner , websecurify )
Websecurify Security Testing Framework identifies web security vulnerabilities by using advanced browser automation, discovery and fuzzing technologies. The framework is written in JavaScript and successfully executes in numerous platforms including modern browsers with support for HTML5, xulrunner, xpcshell, Java, V8 and others.
More information: here
Changelog
Improved user interface.
The workspace window now has an Issue view which provides detailed information on each finding.
Detailed reports which can be exported in CSV, HTM, XML and JSON.
More complete spidering and analytical engines.
Websecurify 0.5 is able to detect CRLFI, LFI, Directory Listing, System Path disclosure vulnerabilities and it will be able to successfully extract other useful information while testing.
The test engine is more capable and easily extensible.
Internationalization is now supported everywhere including the reporting engine. This means that reports can be translated into any of the supported languages
Many other small improvements which make Websecurify 0.5 a great product.
POSTSCRIPTUM
Download Websecurify v0.5 Final
COMPLIANCE MANDATES
Application Scanner : PCI/DSS 6.3, SOX A12.4, GLBA 16 CFR 314.4(b) and (2), HIPAA 164.308(a)(1)(i), FISMA RA-5, SA-11, SI-2, ISO 27001/27002 12.6, 15.2.2Vulnerability Scanner : PCI DSS 11.2, 6.6, SOX A13.3, GLBA 16CFR Part 314.4(c), HIPAA 164.308(a)(8), FISMA RA-5, SI-2, ISO 27001-27002 12.6, 15.2.2
RELATED ARTICLES
Application Scanner,
Configurations checks,
Vulnerability Scanner,
websecurify,
6 March 2010 : Websecurify v0.5 Final28 February 2010 : Websecurify v0.5 RC 1 released19 February 2010 : Websecurify v0.5 Beta 1 released26 November 2009 : Websecurify v0.4 released13 November 2009 : Websecurify updated to v0.4 RC2
