WebApp Sec mailing list archives

Re: Creating API for SSS & Appscan


From: "Vivek P" <iamherevivek () gmail com>
Date: Fri, 25 May 2007 11:39:29 +0530

hi

That was a great contribution to my research,
thank u segal..


On 5/25/07, Ory Segal <osegal () watchfire com> wrote:
Hi Vivek,

You should check out AppScan's eXtensions Framework & SDK at
http://axf.watchfire.com - it will allow you to create more types of
integrations that just simple APIs. You can also download the complete
SDK documentation from that site.

Thanks,
-Ory Segal
Watchfire



> -----Original Message-----
> From: listbounce () securityfocus com
> [mailto:listbounce () securityfocus com] On Behalf Of Vivek P
> Sent: Thursday, May 24, 2007 11:31 AM
> To: Pen-Testing; security-basics () securityfocus com;
> webappsec () securityfocus com
> Subject: Creating API for SSS & Appscan
>
> Hi to all @securityfocus
>
> I am on look out for some solutions to automate and imrove
> pentesting setup of mine, i use an array of tools & alot of
> internal domains to test atleast 10000 of them. I use SSS,
> Appscan etc for that.
>
> I had a logical solution to make things simple by developing
> an API so that i can run tools like pentest -sss.exe
> -appscan.exe --www.targetsite.com /all options... or
> something like that
>
> I would like to get help on topics
>
>  a) some API's that are available for sss (related documentations)
>  b) some API for appscan (or related documentations)
>  c) some peek into tools that can sniff queries done from
> core of these testing tools to the kernel (so that i can duplicate the
> replies)
>
> This is just a research level discussion. Please reply with
> your valuable suggestions.
>
>
> thanx for your time..
> --
> Vivek P Nair
> Vice President, Technology
> ASG
> www.vivekpnair.co.nr
> iamherevivek () gmail com
> vivek.p.nair () appingroup com
> d3@d Br@iN
> "i thought i would change the world, But they wouldnt gimme
> the source Code !!"
>
> --------------------------------------------------------------
> ----------
> This List Sponsored by: Cenzic
>
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic See HOW Now with
> our 20/20 program!
>
> http://www.cenzic.com/c/2020
> --------------------------------------------------------------
> ----------
>
>



--
Vivek P Nair
Vice President, Technology
Appin Knowledge Solutions
Appin Security Group
www.vivekpnair.co.nr
iamherevivek () gmail com
vivek.p.nair () appingroup com
d3@d Br@iN
"i thought i would change the world, But they wouldnt gimme the source Code !!"

-------------------------------------------------------------------------
Sponsored by: Watchfire

The Twelve Most Common Application-level Hack Attacks
Hackers continue to add billions to the cost of doing business online despite security executives' efforts to prevent malicious attacks. This whitepaper identifies the most common methods of attacks that we have seen, and outlines a guideline for developing secure web applications. Download today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008rSe
--------------------------------------------------------------------------


Current thread: