Google Released Web Application Security Scanner Called Ratproxy

-
"Ratproxy" definition as per Google. A semi-automated, largely passive web application security audit tool, optimized for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-initiated traffic in complex web 2.0 environments.
Detects and prioritizes broad classes of security problems, such as dynamic cross-site trust model considerations, script inclusion issues, content serving problems, insufficient XSRF and XSS defenses, and much more.
Ratproxy is currently believed to support Linux, FreeBSD, MacOS X, and Windows (Cygwin) environments.".

Ratproxy have been released as Open Source Project with Code License "Apache License 2.0"


RatProxy analyzes problems such as cross-site script inclusion threats, insufficient cross-site request forgery defenses, caching issues, cross-site scripting candidates, potentially unsafe cross-domain code inclusion schemes and information leakage scenarios, and much more. (A more-detailed discussion of these features and information on securing vulnerable applications is provided here.) Compared with more-traditional active crawlers, or with fully manual request inspection and modification frameworks, this approach offers several significant advantages in terms of minimized overhead; marginalized risk of site disruptions; high coverage of complex, client-driven application states in web 2.0 solutions; and insight into dynamic cross-domain trust models.
RatProxy Download Link is h3r3 (verions 1.5)
RatProxy Detailed Features could be found h3r3

RatProxy Project Page is h3r3

Comments

Post a Comment

Popular posts from this blog

Access Pay sites without payment or authentication

-
Guys, This is to Access pay/registration required sites for free I do not know if this will work with every site on the internet plex. but it worked on many sites for me. All what you need to do, is to make your web browser distinguish itself as Google Bot All of us have seen Google returns search results that lead to sites that require a registeration ?, How googlebot index the site without a registration ? Many sites want their site indexed in google to recieve more hits and thus, make more money with advertisment on their site. Even more interesting is the following question: How do we use this to our advantage ? It is Simple , we need to disguise ourselfs as the googlebot, many sites will let you in without authentication/registration. The parameter we have to change is called the User Agent. The user agent defines the browser and version that you use. For example it would show Internet Explorer as your browser if you are using this one. You need to alter your Browser settings to t...
Read more

How to Downgrade IPOD Touch Firmware

-
This post descries how to downgrade your Ipod Touch (ITouch) Firmware. This post shows you how to downgrade Ipod Touch (ITouch) from 1.1.4 Firmware to 1.1.1, or from 1.1.3 to 1.1.1. If you ask why we need to perform this downgrade, the answer will be to be able to Jailbreak your Ipod Touch (ITouch). This post works for all Ipod Touc (ITouch) 8GB, 16GB, New 16Gb with two nand chips. Files Needed 1) Download the Firmware 1.1.1 from h3r3 2) Download AutoDown from h3r3 If you ask why you need we need "AutoDown", because without it ITunes will refuse to downgrade the IPOD Touch (ITouch) that goes to 8GB,16GB. 3) ITunes from Apple site. Steps to do the downgrade 1) Run AutoDown, by clicking the down.bat file 2) Run ITunes , and click SHIFT+RESOTRE 3) This will open File Borwse window, please point to the downloaded Fimrware at step (1) 4) ITunes will downgrade your IPOD No we have an IPOD Touch 8g,16GB with Firmware 1.1.1 now to Jail Break your IPOD Touch(ITouch) ...
Read more

116 Open Source Application that you can use

-
Below is a list of Open Source application that I used/tried/researched. Please share your experience with us and add your application as well. 3D Animation Editor 1. White_Dune This 3D modeler and animation tool allows users to read, display, and perform low-level editing tasks on VRML97 files. VRML97, which stands for "Virtual Reality Modeling Language," is the current industry standard for displaying 3D animations on the Web. Operating system: Linux/Unix, OS X, Windows. Address Book 2. Rubrica Written using GNOME and GTK+, Rubrica stores contact information as XML data. It can import/export from a variety of formats, including GnomeCard, KAddressbook, Evolution, and csv file format. Operating system: Linux/Unix. Audio Tools 3. Audacity Audacity allows users to record live audio, convert tapes and records to digital formats, or mix pre-existing digital audio tracks. Supported formats include Ogg Vorbis, MP3, and WAV sound files. Operating system: Linux/...
Read more