Evaluating Web Scanning Tools with OWASP Site Generator
Continuing this week's discussion of Open Web Application Security Project projects, I'll disucss the OWASP Site Generator tool.
The Site Generator is used to generate dynamic Web sites with known vulnerabilities using XML configuration files. The program can be used for a number of purposes, like training and creating honeypots, but I think it is especially useful to network administrators to help evaluate Web application security scanners. Rather than just relying on vendor provided marketing material, you can use this tool to generate sites with known vulnerabilites and run scanners head to head to see which can produce the most accurate results.
Network administrators don't need to be proficient in XML, the project includes a GUI editor for configuring test sites.
Web Site Creator with a list of vulnerabilites that will be included in the site.
The Site Generator project was initiated by Foundstone, a division of McAfee, and is now run by OWASP.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
