[Owasp-Recife] Fwd: Arachni Framework v1.1 & WebUI v0.5.7 have been released (Web Application Security Scanner)

Fri May 1 15:22:14 UTC 2015

---------- Forwarded message ----------
From: Tasos Laskos <tasos.laskos at gmail.com>
Date: 2015-05-01 12:18 GMT-03:00
Subject: Arachni Framework v1.1 & WebUI v0.5.7 have been released (Web
Application Security Scanner)
To: websecurity at webappsec.org, pen-test at securityfocus.com,
webappsec at securityfocus.com

Hey folks,

There's a new version of Arachni, an Open Source, modular and
high-performance
Web Application Security Scanner Framework.

The highlights of this release are:

* More sensible default options.
* Approximately 7-fold performance increase (YMMV depending on webapp
characteristics).
* Support for JSON and XML input vectors.
* Overhauled custom-404 detection heuristics (addresses some edge-case
false-positives).
* HTTP updates:
  * Kerberos authentication.
  * New options allowing for fine-grained SSL configuration.
* Checks for:
  * DOM-based unvalidated redirects.
  * XML External Entity

For more details about the new release please visit:

http://www.arachni-scanner.com/blog/arachni-framework-v1-1-webui-v0-5-7-release/

Download page:
    http://www.arachni-scanner.com/download/

Homepage           - http://www.arachni-scanner.com
Blog               - http://www.arachni-scanner.com/blog
Documentation      - https://github.com/Arachni/arachni/wiki
Support            - http://support.arachni-scanner.com
GitHub page        - http://github.com/Arachni/arachni
Code Documentation - http://rubydoc.info/github/Arachni/arachni
Author             - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
Twitter            - http://twitter.com/ArachniScanner
Copyright          - 2010-2015 Tasos Laskos
License            - Dual-licensed (Apache License v2/Proprietary)
                        (http://www.arachni-scanner.com/license/)

Cheers,
Tasos Laskos.

This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now!
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------

-- 

Ícaro Evangelista Torres
Tecnólogo em Redes de Computadores - IFPB
Pós-Graduado em Segurança da Informação - faculdade IDEZ
Skype: icaroetorres
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-recife/attachments/20150501/df2bb4cd/attachment.html>