BURP SUITE PRO V1.3.02 RELEASED

Burp Suite is an integrated platform for attacking web applications. It contains all of the Burp tools with numerous interfaces between them designed to facilitate and speed up the process of attacking an application. All tools share the same robust framework for handling HTTP requests, persistence, authentication, downstream proxies, logging, alerting and extensibility.

This release fixes a few minor bugs arising from version v1.3.01.

XSSPLOIT XSS SCANNER MULTIPLATFOM V0.5 AVAILABLE

XSSploit is a multi-platform Cross-Site Scripting scanner and exploiter written in Python. It has been developed to help discovery and exploitation of XSS vulnerabilities in penetration testing missions.

When used against a website, XSSploit first crawls the whole website and identifies encountered forms. It then analyses these forms to automatically detect existing XSS vulnerabilities as well as their main characteristics.

DBAPPSECURITY WEB APPLICATION SCANNER MATRIXAY 3.6 WAS RELEASED

 In-depth Scan: risk-oriented in-depth scanning on web application can access to back-end database information and web application list. 

 Web Vulnerability Detection: detect all kinds of typical web vulnerabilities deeply (such as SQL injection, Xpath injection, XSS, the form around, form weak password, all kinds of CGL vulnerabilities.) 

FIRECAT V1.6.2 UPDATED WITH FRAMEWORK DETECTOR

Framework Detector added (Category Information Gathering -> Enumeration and footprinting)

Framework Detector can automatically detect JavaScript framework/s used in current page. Can detect more than 70 popular JavaScript frameworks, libraries and components, including: Backbase, Dojo/Dijit, Echo, ExtJS, GWT, ICEfaces, jQuery, MooTools, Nitobi, Prototype, qooXdoo, Rialto, Rico, script.aculo.us, SmartClient, Spry, TinyMCE, YUI and many others. Based on WTFramework bookmarklet and Library Detector add-on.

IRONWASP V0.9.0.3 RELEASED -A WEB APPLICATION VULNERABILITY TESTING TOOL

IronWASP (Iron Web application Advanced Security testing Platform) is an open source system for web application vulnerability testing, developed by Lavakumar Kuppan.

It is designed to be customizable to the extent where users can create their own custom security scanners using it. Though an advanced user with Python/Ruby scripting expertise would be able to make full use of the platform, a lot of the tool’s features are simple enough to be used by absolute beginners.

FIRECAT 1.5 RELEASED

FireCAT (Firefox Catalog of Auditing exTension) is a mindmap collection of the most efficient and useful firefox extensions oriented application security auditing and assessment

FireCAT 1.5 will be the last release of this 1.x branch. In fact, we are working on a new improved version 2.0 (management of plugins, instant download from security-database, ability to add new extension, extension version checker, Firefox 3.X compatible extensions..)

WEB SORROW SERVER SECURITY SCANNER

A perl based tool for misconfiguration, version detection, enumeration, and server information scanning. Web-Sorrow is a “safe to run” program. meaning it is not designed attempt to exploit or preform any kind of injection, DDoS/DoS, CSRF, XSS, or any harmful attacks. It’s entirely focused on Enumeration and collecting Info on the target server.

CURRENT functionality: