Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Attack on Vulnerability Disclosures Part 2: They Actually Do Some Good, Just Not What is Intended | Main | Oracle Releases Critical Security Patch »

Audit and Assessment Tools: OWASP Report Generator

One of the time consuming tasks about conducting security audits and assessments is just keeping track of the details. Fortunately Open Web Application Security Project (OWASP), which sponsors a number of specialized efforts to create tools and best practices, has created the OWASP Report Generator. This is a tool for security analysts conducting audits and assessments. The tool includes:

• Features for tracking assessment projects
• Defining targets to test within a project
• Tasks to perform on each target
• Tracking results of each assessment task on a target, including the ability to add screenshots
• Summary and detailed reports of results

The current release, version 0.88, is available at here and the source code is available from here. Documentation on the tool is at the project web site.


Tracking findings in the OWASP Report Generator

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/178

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net