Running skipfish on Ubuntu 10.04

Some time ago, Google announced that they had developed and released a security testing tool called skipfish. Running this on debian or ubuntu is quite simple. Open a terminal and type in the following:

sudo apt-get install libssl-dev zlib1g-dev libidn11-dev build-essential
tar xzf skipfish-1.34b.tgz

Now you are ready to test your web application:

./skipfish -W dictionaries/default.wl -o /tmp/

Of course, you have to replace with your own domain. For the fastest results, install the wepapp you want to test on localhost. :-)

Written by Jannich Brendle lør 22 maj 2010 In How to

tags: googlesecurityubuntu

Related posts