ccw5jI8xyr3lHlabIlDkbG 2008-03-14T21:49:37+05:00 Detect logged out sessions. Roll back tests. Login again. Redo tests. 0 17193 10 false 10568 ccw5jI8xyr3lHlabIlDkbG 10 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Improved session handling

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T21:56:19+05:00 Create documentation for creating new testing modules 0 17200 15 false 10568 ccw5jI8xyr3lHlabIlDkbG 15 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Developer documentation

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:04:18+05:00 Search for headers (usually in HTML comments) inserted by source code control programs (svn, cvs, etc) 0 17211 26 false 10568 ccw5jI8xyr3lHlabIlDkbG 26 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Look for source code control headers

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:06:26+05:00 Test for simultaneous sessions using the same account 0 17213 27 false 10568 ccw5jI8xyr3lHlabIlDkbG 27 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Simultaneous logins

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T22:08:32+05:00 Look for query parameters with a numeric value. Increment and decrement by configurable values. 0 17216 29 false 10568 ccw5jI8xyr3lHlabIlDkbG 29 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Test Module: Parameter incrementing

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T22:13:28+05:00 Implement a re-crawl scan phase. Support proxy-based crawl & spider crawl. 0 17222 34 false 10568 ccw5jI8xyr3lHlabIlDkbG 34 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Test Module: Re-crawl phase

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T22:14:05+05:00 0 17223 35 false 10568 ccw5jI8xyr3lHlabIlDkbG 35 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Execute JavaScript in HREF attributes.

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T22:16:36+05:00 Look for webdav support. If it exists, see if it works. 0 17226 38 false 10568 ccw5jI8xyr3lHlabIlDkbG 38 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: WebDAV

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:18:49+05:00 Look for file paths in query parameters, try to provide an external path. This will probably require a web server. 0 17230 41 false 10568 ccw5jI8xyr3lHlabIlDkbG 41 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Remote file inclusion

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:19:35+05:00 Support user-supplied username / password lists. Provide different length lists. 0 17231 42 false 10568 ccw5jI8xyr3lHlabIlDkbG 42 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Brute force authentication

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:20:36+05:00 0 17235 45 false 10568 ccw5jI8xyr3lHlabIlDkbG 45 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Look into HMAP functionality

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:21:02+05:00 Look for file paths being leaked in responses 0 17236 46 false 10568 ccw5jI8xyr3lHlabIlDkbG 46 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Server internal path disclosure

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T22:25:04+05:00 0 17243 52 false 10568 ccw5jI8xyr3lHlabIlDkbG 52 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Get rid of test module numbers

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-15T03:17:48+05:00 0 17322 53 false 10568 ccw5jI8xyr3lHlabIlDkbG 53 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Setup automatic JUnit testing

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-17T04:50:10+05:00 The latest release of HTTPClient will support Mime-encoded bodies. Add this functionality to the payload classes. 0 17723 57 false 10568 ccw5jI8xyr3lHlabIlDkbG 57 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Support Mime-encoded POST bodies

2010-08-24T13:57:29+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T07:57:42+05:00 0 23000 78 false 10568 ccw5jI8xyr3lHlabIlDkbG 78 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Check for JavaScripts that run too long in XSS checking

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T10:58:34+05:00 Check to see if content only seen in one auth profile can be manually accessed in a second auth profile 0 23014 79 false 10568 ccw5jI8xyr3lHlabIlDkbG 79 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Authorization enforcement

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-29T11:01:08+05:00 Allow users to define different user roles being accessed through the proxy. 0 23015 80 false 10568 ccw5jI8xyr3lHlabIlDkbG 80 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Proxy-based user profile definition

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-29T11:04:10+05:00 0 23016 81 false 10568 ccw5jI8xyr3lHlabIlDkbG 81 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Favicon hashes (Nikto)

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:06:07+05:00 0 23039 82 false 10568 ccw5jI8xyr3lHlabIlDkbG 82 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Nikto auth realms

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:09:40+05:00 0 23040 83 false 10568 ccw5jI8xyr3lHlabIlDkbG 83 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Nikto version weakness tests (db_server_msgs)

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:14:21+05:00 0 23042 84 false 10568 ccw5jI8xyr3lHlabIlDkbG 84 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Figure out what Nikto's db_servers is for

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:16:57+05:00 0 23043 85 false 10568 ccw5jI8xyr3lHlabIlDkbG 85 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Check for Apache user dirs

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:24:56+05:00 0 23045 86 false 10568 ccw5jI8xyr3lHlabIlDkbG 86 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module(s): Implement logic similar to nikto_headers.plugin

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:27:53+05:00 0 23046 87 false 10568 ccw5jI8xyr3lHlabIlDkbG 87 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Parse results from an OPTIONS request

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-29T11:33:15+05:00 0 23047 88 false 10568 ccw5jI8xyr3lHlabIlDkbG 88 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Figure out what Nikto's nikto_passfiles.plugin is for

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:34:23+05:00 0 23048 89 false 10568 ccw5jI8xyr3lHlabIlDkbG 89 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Test for PUT & DEL methods

2010-08-24T13:58:13+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-29T11:42:27+05:00 See rm_active_content in nikto_core.plugin 0 23051 91 false 10568 ccw5jI8xyr3lHlabIlDkbG 91 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Remove dates & times from body text w/ auto response code overrides

2010-08-24T13:58:14+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-29T11:46:12+05:00 0 23053 92 false 10568 ccw5jI8xyr3lHlabIlDkbG 92 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Try random credentials to see if authentication is broken

2010-08-24T13:58:14+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-04-04T08:01:08+05:00 0 25774 93 false 10568 ccw5jI8xyr3lHlabIlDkbG 93 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add iframe as an HTML context

2010-08-24T13:58:34+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-04-06T08:47:00+05:00 0 26450 94 false 10568 ccw5jI8xyr3lHlabIlDkbG 94 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Have auto 404 detection consider users

2010-08-24T13:58:38+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-04-12T01:42:59+05:00 The HttpComponents library craps out when there are odd characters in a header value (<> maybe). This comes up from the XSS testing that ends up in a location header. 0 29253 95 false 10568 ccw5jI8xyr3lHlabIlDkbG 95 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Address header formatting in HttpComponents

2010-08-24T13:59:00+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-07-21T06:35:10+06:00 Feature request: Add alert column in scan transactions list Show transactions that resulted in a reportable finding (ie a discovered vulnerability that will appear in the report) in the transactions list to make it easy to see what's been discovered so far and drill into those transactions, even before we get the real-time vulnerabilities discovered "roll-up". Currently if the status window is scrolling it's not easy to see what's been found so far. Preferably, this would be filterable in the transactions list settings dialog so that a user can see only transactions that have logged findings. (once we get sort by column, it would of course be sortable) 0 95963 101 false 10568 d-dnSi8xGr3jlvabIlDkbG,ccw5jI8xyr3lHlabIlDkbG 101 3 d-dnSi8xGr3jlvabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add alert column in scan transactions list

2010-08-24T14:09:58+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr d-dnSi8xGr3jlvabIlDkbGedupreyedupreyeduprey ccw5jI8xyr3lHlabIlDkbG 2008-08-02T12:03:02+06:00 <p> ****** Proxy detection: The web server at demo.testfire.net:80 is also acting as a proxy server. A CONNECT command was issued for "www.grendel-scan.com:443". The response code was 200, indicating a successful connection. Note that this test is not very sophisticated right now, and should be manually confirmed.The transaction used for testing can be viewed <a href="./http-transactions/60.txt">here</a>. <p> What was detected was the upstream proxy (WebScarab) -- in fact, the target server does not honor this request. <p> Transaction log: <p> CONNECT www.grendel-scan.com:443 HTTP/1.1 Host: demo.testfire.net Host: www.grendel-scan.com User-Agent: Mozilla/5.0 (compatible; Grendel-Scan; http://www.grendel-scan.com) <p> HTTP/1.0 200 Ok <p> 0 106645 106 false 10568 d-dnSi8xGr3jlvabIlDkbG,ccw5jI8xyr3lHlabIlDkbG 106 3 d-dnSi8xGr3jlvabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

False-positive on CONNECT proxy detection when using upstream proxy

2010-08-24T14:11:46+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr d-dnSi8xGr3jlvabIlDkbGedupreyedupreyeduprey 2008-08-11T08:41:50+06:00 Lightweight GUI mode 0 112208 109 false 10568 ccw5jI8xyr3lHlabIlDkbG 109 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Lightweight GUI mode

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:42:44+06:00 Add option to manually select platform components (web platform, database server, etc) to focus tests 0 112209 110 false 10568 ccw5jI8xyr3lHlabIlDkbG 110 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Option to manually select platform components

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:46:41+06:00 0 112216 115 false 10568 ccw5jI8xyr3lHlabIlDkbG 115 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add more SQL tautology patterns

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:47:57+06:00 0 112218 116 false 10568 ccw5jI8xyr3lHlabIlDkbG 116 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Mime-encoded POST bodies

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:48:08+06:00 0 112219 117 false 10568 ccw5jI8xyr3lHlabIlDkbG 117 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

HTTP-based authentication

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:48:21+06:00 0 112220 118 false 10568 ccw5jI8xyr3lHlabIlDkbG 118 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Upstream proxy authentication

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:57:08+06:00 0 112223 119 false 10568 ccw5jI8xyr3lHlabIlDkbG 119 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Fuzzer: Add baseline transaction selection

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:57:24+06:00 0 112224 120 false 10568 ccw5jI8xyr3lHlabIlDkbG 120 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Fuzzer: Add automatic baseline detection

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:57:56+06:00 0 112226 122 false 10568 ccw5jI8xyr3lHlabIlDkbG 122 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Preview results during scan

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:58:33+06:00 0 112227 123 false 10568 ccw5jI8xyr3lHlabIlDkbG 123 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: SSL/TLS configuration

2010-08-24T14:12:40+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:59:16+06:00 0 112228 124 false 10568 ccw5jI8xyr3lHlabIlDkbG 124 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Error-based username enumeration

2010-08-24T14:12:40+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-12T04:15:43+06:00 0 113035 127 false 10568 ccw5jI8xyr3lHlabIlDkbG 127 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Allow user-imported file/dir name lists

2010-08-24T14:12:49+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T04:10:07+06:00 Add a proxy option to reveal the values associated with combo box items. 0 121596 131 false 10568 ccw5jI8xyr3lHlabIlDkbG 131 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Reveal combo box values

2010-08-24T14:14:17+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T05:24:17+06:00 0 121637 133 false 10568 ccw5jI8xyr3lHlabIlDkbG 133 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add randomly named query parameter for XSS testing

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T05:25:26+06:00 0 121639 134 false 10568 ccw5jI8xyr3lHlabIlDkbG 134 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test cookie valuess for SQL injection

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T05:31:52+06:00 0 121641 135 false 10568 ccw5jI8xyr3lHlabIlDkbG 135 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Test for SQL injection into stored procedures

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T05:53:36+06:00 Use a virtual hosts file to permanently pin the IP address to a host name. Allow for user customization 0 121644 137 false 10568 ccw5jI8xyr3lHlabIlDkbG 137 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Virtual hosts file

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T09:01:20+06:00 0 121806 138 false 10568 ccw5jI8xyr3lHlabIlDkbG 138 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add test duration to the report

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T09:18:44+06:00 0 121809 140 false 10568 ccw5jI8xyr3lHlabIlDkbG 140 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Make trailing the default for proxy only mode

2010-08-24T14:14:19+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T09:43:31+06:00 0 121813 141 false 10568 ccw5jI8xyr3lHlabIlDkbG 141 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Option to reveal form action and method for proxied requests

2010-08-24T14:14:19+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-24T00:42:31+06:00 0 122081 148 false 10568 ccw5jI8xyr3lHlabIlDkbG 148 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

64-bit buids for Linux

2010-08-24T14:14:21+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-24T22:42:44+06:00 Unify the scan settings and scan status GUIs 0 122341 149 false 10568 ccw5jI8xyr3lHlabIlDkbG 149 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Unified GUI

2010-08-24T14:14:24+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-29T09:16:55+06:00 0 126332 159 false 10568 ccw5jI8xyr3lHlabIlDkbG 159 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Have windows grab focus

2010-08-24T14:15:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-30T09:09:55+06:00 0 127169 161 false 10568 ccw5jI8xyr3lHlabIlDkbG 161 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

GUI: Convert all add/remove lists to the standard control

2010-08-24T14:15:28+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-30T09:13:37+06:00 0 127171 162 false 10568 ccw5jI8xyr3lHlabIlDkbG 162 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Create a more detailed log of the scan

2010-08-24T14:15:28+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-30T09:43:07+06:00 0 127184 163 false 10568 ccw5jI8xyr3lHlabIlDkbG 163 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add more advanced log/event management

2010-08-24T14:15:28+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-09-03T08:25:23+06:00 0 129898 165 false 10568 ccw5jI8xyr3lHlabIlDkbG 165 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Add scan stats to the report

2010-08-24T14:16:08+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-09-03T08:26:01+06:00 0 129899 166 false 10568 ccw5jI8xyr3lHlabIlDkbG 166 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

GUI: Remember transaction control column widths

2010-08-24T14:16:08+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-09-19T23:24:14+06:00 0 146434 169 false 10568 ccw5jI8xyr3lHlabIlDkbG 169 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Special headers may be required to repeat AJAX-like requests

2010-08-24T14:19:34+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T21:46:32+05:00 0 17191 8 false 10569 ccw5jI8xyr3lHlabIlDkbG 8 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

PDF reports

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T21:58:50+05:00 Create the ability to generate reports from the databases of saved scans 0 17203 18 false 10569 ccw5jI8xyr3lHlabIlDkbG 18 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Generate reports from past scans

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T21:59:52+05:00 Save a scan in progress, close the program, open it back up and resume the scan. 0 17205 20 false 10569 ccw5jI8xyr3lHlabIlDkbG 20 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Ability to save and resume scan

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:00:11+05:00 0 17206 21 false 10569 ccw5jI8xyr3lHlabIlDkbG 21 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

XML report

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-03-14T22:00:58+05:00 0 17207 22 false 10569 ccw5jI8xyr3lHlabIlDkbG 22 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Authentication domain handling

2010-08-24T13:57:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:21:46+05:00 Look for variations on names. For example, if there is a SendDocument, try a ViewDocument with the same query parameters. 0 17237 47 false 10569 ccw5jI8xyr3lHlabIlDkbG 47 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Name variations

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-14T22:23:50+05:00 Support one-time passwords (e.g. SecureID) 0 17241 50 false 10569 ccw5jI8xyr3lHlabIlDkbG 50 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Support for one-time passwords

2010-08-24T13:57:27+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-28T08:26:46+05:00 0 22663 73 false 10569 ccw5jI8xyr3lHlabIlDkbG 73 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Support graphs in scan reports

2010-08-24T13:58:10+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-03-28T08:27:10+05:00 0 22664 74 false 10569 ccw5jI8xyr3lHlabIlDkbG 74 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Graph Session IDs in report

2010-08-24T13:58:10+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:59:48+06:00 0 112229 125 false 10569 ccw5jI8xyr3lHlabIlDkbG 125 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Automated AJAX navigation (spider)

2010-08-24T14:12:40+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T09:00:35+06:00 0 112230 126 false 10569 ccw5jI8xyr3lHlabIlDkbG 126 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Client-side SSL certificates for authentication

2010-08-24T14:12:40+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-15T01:03:32+06:00 Random time delays between requests 0 115606 130 false 10569 ccw5jI8xyr3lHlabIlDkbG 130 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

IDS evasion option

2010-08-24T14:13:12+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T05:52:45+06:00 Search for other virtual hosts on the same IP 0 121643 136 false 10569 ccw5jI8xyr3lHlabIlDkbG 136 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Virtual host search

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T09:07:20+06:00 0 121808 139 false 10569 ccw5jI8xyr3lHlabIlDkbG 139 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Bulk target import

2010-08-24T14:14:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T10:32:30+06:00 0 121816 143 false 10569 ccw5jI8xyr3lHlabIlDkbG 143 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Display failed requests in transaction list

2010-08-24T14:14:19+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T10:58:21+06:00 0 121818 144 false 10569 ccw5jI8xyr3lHlabIlDkbG 144 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Generate SSL certs on the fly with a fixed CA cert

2010-08-24T14:14:19+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T11:12:53+06:00 0 121820 145 false 10569 ccw5jI8xyr3lHlabIlDkbG 145 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Sort transaction table by arbitrary column

2010-08-24T14:14:19+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-24T22:44:12+06:00 From a user: If you don't provide a name it goes somewhere in you "My Documents" folder. If I try to change it to a folder I want it to be in, it complains that the folder already exists. Just a suggestion, but you should make it so no matter what folder I choose, it creates a new folder for the scan "title" and then folders within there for each "site" I add to my scan. 0 122342 150 false 10569 ccw5jI8xyr3lHlabIlDkbG 150 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Revise storage directory choice

2010-08-24T14:14:24+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-28T05:04:08+06:00 0 125195 154 false 10569 ccw5jI8xyr3lHlabIlDkbG 154 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Identify leaked email addresses

2010-08-24T14:15:03+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-29T05:44:22+06:00 Identify common page elements, such as headers, footers, navigation links, etc, and remove them from a document when comparing two DOMs. 0 126277 158 false 10569 ccw5jI8xyr3lHlabIlDkbG 158 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Identify common page elements

2010-08-24T14:15:17+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-29T09:17:37+06:00 Primarily for transaction displays 0 126333 160 false 10569 ccw5jI8xyr3lHlabIlDkbG 160 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Implement find function in multiline text blocks

2010-08-24T14:15:18+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-09-19T08:58:21+06:00 0 145851 167 false 10569 ccw5jI8xyr3lHlabIlDkbG 167 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Adapt request throttling to website resposne time

2010-08-24T14:19:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-25T23:44:38+06:00 0 123200 152 false 11998 ccw5jI8xyr3lHlabIlDkbG 152 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Create packet capture of all scan-related traffic

2010-08-24T14:14:38+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-09-19T09:07:00+06:00 Including scan module config 0 145854 168 false 11998 ccw5jI8xyr3lHlabIlDkbG 168 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Ability to change scan config during scan

2010-08-24T14:19:26+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:43:28+06:00 0 112210 111 false 28930 ccw5jI8xyr3lHlabIlDkbG 111 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Option to automatically detect web platform (.Net, PHP, etc) and limit tests based on that

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:45:10+06:00 0 112213 112 false 28930 ccw5jI8xyr3lHlabIlDkbG 112 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: DOM-based XSS

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:45:26+06:00 0 112214 113 false 28930 ccw5jI8xyr3lHlabIlDkbG 113 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Persistent XSS

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-11T08:45:56+06:00 0 112215 114 false 28930 ccw5jI8xyr3lHlabIlDkbG 114 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test Module: Time-based SQL injection

2010-08-24T14:12:39+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr ccw5jI8xyr3lHlabIlDkbG 2008-05-14T12:07:09+05:00 All tests, spider, no proxy, against a properly working PHPBB 2.0.1 system (installed with Ubuntu 8.0.4 JeOS and database copied over) -- yes, I know, i really have to fix the shared targets. Exception caught when trying to run test module "Directory enumerator" (module number 5): java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.tests.testModules.Module0005.testByDirectory(Module0005.java:118) at com.grendelscan.tests.testJobs.ByDirectoryTestJob.internalRunTest(ByDirectoryTestJob.java:17) at com.grendelscan.tests.testJobs.TestJob.runTest(TestJob.java:60) at com.grendelscan.tests.queue.TesterThread.run(TesterThread.java:89) at java.lang.Thread.run(Thread.java:595) Exception caught when trying to run test module "File enumerator" (module number 6): java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.tests.testModules.Module0006.testByDirectory(Module0006.java:136) at com.grendelscan.tests.testJobs.ByDirectoryTestJob.internalRunTest(ByDirectoryTestJob.java:17) at com.grendelscan.tests.testJobs.TestJob.runTest(TestJob.java:60) at com.grendelscan.tests.queue.TesterThread.run(TesterThread.java:89) at java.lang.Thread.run(Thread.java:595) Thread CategorizerThread-1 died, exception was: java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.categorizers.impl.ByFileCategorizer.getTokens(ByFileCategorizer.java:28) at com.grendelscan.categorizers.ByTokenCategorizer.analyzeTransaction(ByTokenCategorizer.java:35) at com.grendelscan.categorizers.queue.CategorizerQueue.categorizeTransaction(CategorizerQueue.java:78) at com.grendelscan.categorizers.queue.CategorizerThread.run(CategorizerThread.java:46) at java.lang.Thread.run(Thread.java:595) Thread CategorizerThread-0 died, exception was: java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.categorizers.impl.ByFileCategorizer.getTokens(ByFileCategorizer.java:28) at com.grendelscan.categorizers.ByTokenCategorizer.analyzeTransaction(ByTokenCategorizer.java:35) at com.grendelscan.categorizers.queue.CategorizerQueue.categorizeTransaction(CategorizerQueue.java:78) at com.grendelscan.categorizers.queue.CategorizerThread.run(CategorizerThread.java:46) at java.lang.Thread.run(Thread.java:595) Thread CategorizerThread-2 died, exception was: java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.categorizers.impl.ByFileCategorizer.getTokens(ByFileCategorizer.java:28) at com.grendelscan.categorizers.ByTokenCategorizer.analyzeTransaction(ByTokenCategorizer.java:35) at com.grendelscan.categorizers.queue.CategorizerQueue.categorizeTransaction(CategorizerQueue.java:78) at com.grendelscan.categorizers.queue.CategorizerThread.run(CategorizerThread.java:46) at java.lang.Thread.run(Thread.java:595) Exception caught when trying to run test module "Directory enumerator" (module number 5): java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.tests.testModules.Module0005.testByDirectory(Module0005.java:118) at com.grendelscan.tests.testJobs.ByDirectoryTestJob.internalRunTest(ByDirectoryTestJob.java:17) at com.grendelscan.tests.testJobs.TestJob.runTest(TestJob.java:60) at com.grendelscan.tests.queue.TesterThread.run(TesterThread.java:89) at java.lang.Thread.run(Thread.java:595) Exception caught when trying to run test module "File enumerator" (module number 6): java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(HashMap.java:841) at java.util.HashMap$KeyIterator.next(HashMap.java:877) at com.grendelscan.requester.ResponseCodeOverrides.getLogicalResponseCode(ResponseCodeOverrides.java:202) at com.grendelscan.requester.http.transactions.AbstractHttpTransaction.getLogicalResponseCode(AbstractHttpTransaction.java:527) at com.grendelscan.tests.testModules.Module0006.testByDirectory(Module0006.java:136) at com.grendelscan.tests.testJobs.ByDirectoryTestJob.internalRunTest(ByDirectoryTestJob.java:17) at com.grendelscan.tests.testJobs.TestJob.runTest(TestJob.java:60) at com.grendelscan.tests.queue.TesterThread.run(TesterThread.java:89) at java.lang.Thread.run(Thread.java:595) 0 46499 100 false 29037 d-dnSi8xGr3jlvabIlDkbG,ccw5jI8xyr3lHlabIlDkbG 100 3 d-dnSi8xGr3jlvabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

BUG: java.util.ConcurrentModificationException thrown in Modules 5 and 6 (Directory Enumerator, File Enumerator)

2010-08-24T14:01:34+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr d-dnSi8xGr3jlvabIlDkbGedupreyedupreyeduprey ccw5jI8xyr3lHlabIlDkbG 2008-07-27T01:58:27+06:00 I haven't yet evaluated the bit-coverage of the collected sample. <p> According to Microsoft in http://msdn.microsoft.com/en-us/library/aa479041.aspx <p> "Each active ASP.NET session is identified using a 120-bit string made only of URL-allowed characters. The session ID is generated using the Random Number Generator (RNG) cryptographic provider. The service provider returns a sequence of 15 randomly generated numbers (15 bytes x 8 bit = 120 bits). The array of random numbers is then mapped to valid URL characters and returned as a string." <p> Grendel (from demo.testfire.net) <p> The cookie named ASP.NET_SessionId appears to be used to track session state. Approximately 49 bits of random data were observed. A minimum of 128 is generally recommended. <p> The following transactions were used for the test: [omitted] <p> The following cookieJar were received during testing: 20upx4juvf4ish55fokcjaj3 qhpf2lbtgjzjcl55dd3jcobu j1f4ku45knpos455rrg2dg45 utb2uqzq5c4sgyneahp1unjn ty3fvf45jpv4jh4530mnku45 d0r3oe35g2cofi45sp2moun4 ifli1faz4h5xiz55oetuto55 lwmnhw2vkiq2sj55m34er155 zob1exqyd32map45zf5u2nfn 2iwwqzvgj2math55yrjjan55 da3uezbjxcody155f4eggsry 0 101300 102 false 29037 d-dnSi8xGr3jlvabIlDkbG,ccw5jI8xyr3lHlabIlDkbG 102 3 d-dnSi8xGr3jlvabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

BUG (?): Session ID entropy and ASP.NET

2010-08-24T14:10:46+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr d-dnSi8xGr3jlvabIlDkbGedupreyedupreyeduprey d-dnSi8xGr3jlvabIlDkbG 2008-07-27T05:00:41+06:00 Current certificate attributes: CN = scanner O = L = Bailey ST = Colorado C = US 0 101390 103 false 29037 d-dnSi8xGr3jlvabIlDkbG 103 3 d-dnSi8xGr3jlvabIlDkbG aib4v08xCr3izrabIlDkbG 1 Accepted 0

Replace proxy's SSL cert, include Grendel-Scan name

2010-08-24T14:10:46+05:00 0.0 0.0 None 0.0 0.0 d-dnSi8xGr3jlvabIlDkbGedupreyedupreyeduprey d-dnSi8xGr3jlvabIlDkbGedupreyedupreyeduprey 2008-08-13T05:21:48+06:00 0 113986 128 false 29037 ccw5jI8xyr3lHlabIlDkbG 128 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test TRACE against known valid URLs, not just /

2010-08-24T14:12:57+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-15T01:02:52+06:00 0 115604 129 false 29037 ccw5jI8xyr3lHlabIlDkbG 129 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

BUG: POST proxy requests not tested or sent through upstream proxy

2010-08-24T14:13:12+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-23T09:52:14+06:00 Prevents something like this: http://www.asdf.com.* matching http://www.asdf.com.tw 0 121814 142 false 29037 ccw5jI8xyr3lHlabIlDkbG 142 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Implicit whitelist regex must have a trailing slash

2010-08-24T14:14:19+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-24T22:45:16+06:00 0 122343 151 false 29037 ccw5jI8xyr3lHlabIlDkbG 151 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

BUG: Meta redirection tags not handled

2010-08-24T14:14:24+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-27T07:28:18+06:00 0 124370 153 false 29037 ccw5jI8xyr3lHlabIlDkbG 153 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

BUG: Comment lister may be listing null comments

2010-08-24T14:14:51+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2008-08-29T03:23:21+06:00 This may be due to Java, since underscores aren't legal in DNS 0 126141 157 false 29037 ccw5jI8xyr3lHlabIlDkbG 157 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Bug: Underscore in hostname doesn't work

2010-08-24T14:15:15+05:00 0.0 0.0 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr 2009-05-29T06:16:54+06:00 0 385937 171 false 29037 ccw5jI8xyr3lHlabIlDkbG 171 3 ccw5jI8xyr3lHlabIlDkbG aib4v08xCr3izrabIlDkbG 0 New 0

Test encoding consistency in query parameter names

2010-08-24T15:36:26+05:00 None 0.0 0.0 ccw5jI8xyr3lHlabIlDkbGbyrnedrbyrnedrbyrnedr