Running skipfish on Ubuntu 10.04

Some time ago, Google announced that they had developed and released a security testing tool called skipfish. Running this on debian or ubuntu is quite simple. Open a terminal and type in the following:

sudo apt-get install libssl-dev zlib1g-dev libidn11-dev build-essential
wget http://skipfish.googlecode.com/files/skipfish-1.34b.tgz
tar xzf skipfish-1.34b.tgz
make

Now you are ready to test your web application:

./skipfish -W dictionaries/default.wl -o /tmp/bredsaal.dk http://bredsaal.dk/

Of course, you have to replace bredsaal.dk with your own domain. For the fastest results, install the wepapp you want to test on localhost. :-)


Written by Jannich Brendle lør 22 maj 2010 In How to

tags: googlesecurityubuntu

Related posts

social