Security News

External Links

Home
Resources
Free Tools

Simple Scanner

SimpleScanner is a Ruby port of the Perl version of SimpleScanner presented in Ch 8 of Network Security Tools by Justin Clarke et al. Refer to www.oreilly.com/catalog/networkst/ for the sample chapter and Perl source code.

The scanner is capable of parsing a Burp log file (Refer to portswigger.net/proxy/) and discovering the following web application vulnerabilities:

SQL Injection
Cross Site Scripting
Directory Listing

The following http components are also handled:

http 0.9, 1.0 and 1.1
GET and POST requests
https/ssl/tls - does not verify if certificate is present by default but is capable
Cookie handling - sets static cookie in header
HTTP Proxy tunneling

Information

Version: 0.2
Release Date: October 14, 2007
License: GPL v2
MD5 Sum: 7034f937d0e097d02369ee66735432f0 sts-simplescanner.tar.gz

Documentation

Library interfaces can be found here

Download