{"id":460823,"date":"2010-03-21T19:05:00","date_gmt":"2010-03-21T23:05:00","guid":{"rendered":"tag:blogger.com,1999:blog-7196788127833928948.post-3571601058271117345"},"modified":"2010-03-21T19:05:00","modified_gmt":"2010-03-21T23:05:00","slug":"skipfish-new-web-security-tool-from-google","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/460823","title":{"rendered":"Skipfish – New Web Security Tool from Google"},"content":{"rendered":"
Google is continuing it’s efforts into the web security area. After ratproxy<\/a>, which was a passive security tool, here comes skipfish – an active security scanner.<\/p>\n

\"\"<\/a><\/p>\n

Shortinfosec has compiled skipfish v1.11b on windows.<\/p>\n

UPDATE: Seeing that skipfish releases are changing twice a day, I am starting a persistent post on my blog to publish the latest versions of skipfish compiled for Windows.<\/span><\/p>\n

Here is the link to the post for future versions<\/span><\/p>\n

http:\/\/www.shortinfosec.net\/2010\/03\/compiling-latest-skipfish-for-windows.html<\/a>
<\/span><\/p>\n

<\/span>
You can download compiled skipfish<\/span><\/a>-1.11b for Windows here<\/a><\/span><\/p>\n

Verification sum:<\/p>\n

skipfish-1.1b.zip MD5: 6D97FBCB65CAF57A7D74E99C0671AEDA<\/p>\n

<\/p>\n

In order to run it, just unzip the archive – it contains the cygwin run-time libraries needed for running skipfish.<\/p>\n

If you wish to compile skipfish yourself, you need to install cygwin and compile it with make. Do not forget to update your path variable to include c:\\cygwin\\bin.<\/p>\n

Quickstart<\/span>
To run it, start a command line in the directory where skipfish is unzipped\/compiled<\/p>\n

    \n
  1. create a report directory (report_outdir)<\/tt><\/a><\/tt><\/tt><\/li>\n
  2. type skipfish<\/span><\/span> -o report_outdir http:\/\/target-site<\/report_outfile><\/report_outdir><\/tt><\/a><\/tt><\/li>\n
  3. after the scan is finished, go to report_outdir and open index.html to view the results<\/li>\n
  4. you can always break the scan by ctrl-c
    <\/span><\/li>\n<\/ol>\n

    Skipfish creates a more advanced report then ratproxy, and it is autogenerated, so you don’t need a special parser to create the HTML report from the raw results.<\/p>\n

    Talkback and comments are most welcome<\/p>\n

    Related posts
    Ratproxy – Google Web Security Assessment Tool<\/a>
    Google’s Ratproxy Web Security Tool for Windows<\/a>
    Tutorial – Using Ratproxy for Web Site Vulnerability Analysis<\/a><\/div>\n

    <\/div>\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    Google is continuing it’s efforts into the web security area. After ratproxy, which was a passive security tool, here comes skipfish – an active security scanner. Shortinfosec has compiled skipfish v1.11b on windows. UPDATE: Seeing that skipfish releases are changing twice a day, I am starting a persistent post on my blog to publish the […]<\/p>\n","protected":false},"author":5679,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-460823","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/460823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/5679"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=460823"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/460823\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=460823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=460823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=460823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}