Skipfish - Web App Security Scanner

[skidmarq]

SkipfishDoc - skipfish - Project documentation - Project Hosting on Google Code

Internally developed by Google and written entirely in C. Very fast and early testing I've done indicates it catches things that other scanners I've used miss.

Admittedly, I'm not deeply skilled in Web App design so I'd love to hear other comments on the tool from the experts...

[Archangel-Amael]

Rel1k apparently fuzzed it for like 3 minutes and broke it. So if that tells you anything, then there ya go.

[skidmarq]

Yep, not good...thanks!

[purehate]

Yeah its useful but not even close to stable. I am waiting for a few more revisions.

[skidmarq]

Yeah, I realized after I posted how many versions have been released in the last few days alone. Maybe this is just a "put it on our radar" thread for when it matures down the road...

[purehate]

Yeah, I realized after I posted how many versions have been released in the last few days alone. Maybe this is just a "put it on our radar" thread for when it matures down the road...

Yeah, for sure. I have tested the tool and will be watching its progress. Once its in better shape we will get it in the repos.