Where to download Extensions?

[Mano]

Hi,

Websecurify seems good tool for security. We have planned to evaluate
this tool. But some of the features are not there.

I searched whole site. I did not find any Extensions, please let me
know where to download Extensions and how to install.

I have downloaded 0.8 and scanned http://localhost/, tool never thrown
CSRF attack.

Regards,
Mano

[pdp]

Hi Mano,

At the moment there are only a limited set of extensions most of which
are developed internally. However, as we approach version 1.0, which
is supposed to freeze the core code base, we will release more
documentation on how to contribute extensions.

Stay tuned. We are going to release 0.9 in the next couple of weeks.

pdp

On Aug 25, 8:22 am, Mano <sendtom...@gmail.com> wrote:
> Hi,
>
> Websecurify seems good tool for security. We have planned to evaluate
> this tool. But some of the features are not there.
>
> I searched whole site. I did not find any Extensions, please let me
> know where to download Extensions and how to install.
>

> I have downloaded 0.8 and scannedhttp://localhost/, tool never thrown
> CSRF attack.
>
> Regards,
> Mano

[Eoin Keary]

All it does now is scan a given URL?

[pdp]

Yes! :)

You point the url you want to scan and sit back drinking Mojito. The
current alpha, and the stuff in the trunk, make use of a testing
engine which is very optimized. While the engine is fast, it will miss
some corner cases. It also doesn't do extensive bruteforcing and
fuzzing. The capabilities are there but not turned-on by default.

After 0.9 we will start putting more effort into standardizing our
code base which will allow us to release several tutorials and
extensive documentation how to write extensions and as such improve
the core testing capabilities. We are also working on a private
version which has some quite neat capabilities but we will start
talking about it when we are nearly done, i.e. reach some sort of
stable beta.

pdp

On Sep 7, 9:02 pm, Eoin Keary <eoinke...@gmail.com> wrote:
> All it does now is scan a given URL?
>

[pdp]

I am not sure what your question is. You want to develop an extension in .NET?

On Saturday, 4 August 2012 17:07:15 UTC+1, I_like_websecurify wrote:

I am developing application on Websecurify. Can you help me how to use websecurify for Visual .Net.
Thanks !

[Ngọc Thức]

yes, i want to develop an extension in .NET.
Can you help me ?
I'm really in need of it.

[Petko D. Petkov]

Hi,

I think this will be rather difficult.

Websecurify 0.9 is based on Mozilla's gecko runtime. It executes natively JavaScript, XUL and all web technologies. You can also create xpcom components in C or C++. Simply put binary and .NET byte code are not quite the same so you will need some kind of intermediate device to interfere between both.

One solution I can suggest is to write a very thin JavaScript XPCOM extension which creates a REST service and than you write your main code as a .NET executable which can connect to the REST service and invoke the exposed REST methods.

How does this sound?

--

Petko D. Petkov | GNUCITIZEN.org

[Ngọc Thức]

I don't think so, you can build websecurify to run on windows (file Websecurify_Scanner_0.9.exe). Why do you help me build websecurify on windows ???
Please !

[Petko D. Petkov]

Hi,

While Websecurify is available on Windows it is not built on the top of .NET. I believe this is your question or am I missing something?

On 5 Aug 2012, at 12:08, Ngọc Thức wrote:

I don't think so, you can build websecurify to run on windows (file Websecurify_Scanner_0.9.exe). Why do you help me build websecurify on windows ???
Please !

[Ngọc Thức]

i'm sorry. I thought you build websecurify on .NET. Thank you very much. but, what tool do you built Websecurify_Scanner_0.9.exe ?

[Petko D. Petkov]

As I mentioned before, the tool is built on the top of Mozilla's runtime.

On 5 Aug 2012, at 15:52, Ngọc Thức wrote:

i'm sorry. I thought you build websecurify on .NET. Thank you very much. but, what tool do you built Websecurify_Scanner_0.9.exe ?

[Ngọc Thức]

Thank you very much ! It's my pleasure to know you.