-
Cgi-scanner
Hi all,
i m writing a cgi-scanner(java) i want to know about that from where will i get the basic architecture for that, how would i do a vulnerability analysis(false positives) and what type of features should one expect in a cgi-scanner.
ur comments in that regard will be quite valuable
Thanks
-
Have a look at Whisker. It's written in Perl so it should be easy to read/understand.
Unfortunately I cannot seem to get on the wiretrip site so I'm pointing you to somewhere else with some short info (including the URL where to get it).
http://www.securiteam.com/tools/3R5QHQAPPY.html
-
http://www.nessus.org/
Has several CGI specific tests built in.