ratproxy 1.58
Ratproxy 1.58
Open Source web app security audit program more>> Open Source web app security audit program
Ratproxy is a semi-automated, largely passive web application security audit tool. It is meant to complement active crawlers and manual proxies more commonly used for this task.
Ratproxy is optimized specifically for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-initiated traffic in complex web 2.0 environments.
Detects and prioritizes broad classes of security problems, such as dynamic cross-site trust model considerations, script inclusion issues, content serving problems, insufficient XSRF and XSS defenses, and much more.
Ratproxy is currently believed to support Mac OS X, FreeBSD, Linux, and Windows (Cygwin) environments.
The approach taken with ratproxy offers several important advantages over more traditional methods:
- No risk of disruptions. In the default operating mode, tool does not generate a high volume of attack-simulating traffic, and as such may be safely employed against production systems at will, for all types of ad hoc, post-release audits. Active scanners may trigger DoS conditions or persistent XSSes, and hence are poorly suited for live platforms.
- Low effort, high yield. Compared to active scanners or fully manual proxy-based testing, ratproxy assessments take very little time or bandwidth to run, and proceed in an intuitive, distraction-free manner - yet provide a good insight into the inner workings of a product, and the potential security vulnerabilities therein. They also afford a consistent and predictable coverage of user-accessible features.
- Preserved control flow of human interaction. By silently following the browser, the coverage in locations protected by nonces, during other operations valid only under certain circumstances, or during dynamic events such as cross-domain Referer data disclosure, is greatly enhanced. Brute-force crawlers and fuzzers usually have no way to explore these areas in a reliable manner.
- WYSIWYG data on script behavior. Javascript interfaces and event handlers are explored precisely to a degree they are used in the browser, with no need for complex guesswork or simulations. Active scanners often have a significant difficulty exploring JSON responses, XMLHttpRequest() behavior, UI-triggered event data flow, and the like.
- Easy process integration. The proxy can be transparently integrated into an existing manual security testing or interface QA processes without introducing a significant setup or operator training overhead.
NOTE: Ratproxy is licensed and provided under the terms of the Apache License 2.0.
web2py 1.65.7
web2py functions as a free and open source full-stack enterprise framework for agile development of quick, scalable, secure and portable database-driven web-based applications. more>>
web2py 1.65.7 functions as a free and open source full-stack enterprise framework for agile development of quick, scalable, secure and portable database-driven web-based applications.
The best way to understand web2py is to try it. You can try it online here. This online version is identical to the actual web2py although some functions are disabled for security reasons.
web2py was inspired by Ruby on Rails and, as Rails, it focuses on rapid development and follows a Model View Controller design. web2py differs from Rails because it is based on Python (thus it is faster and more scalable), because it provides a comprehensive web-based administrative interface (thus there is no need to ever type shell commands unless you wish), includes libraries to handle more protocols (for example XML-RPC and RSS feeds), and can run on the Google App Engine.
web2py was also inspired by Django and, as Django, it has the ability to generate forms from database tables and it includes an extensive set of validators. web2py differs from Django because it is more compact, easier to learn and does not have any project-level configuration files.
web2py is less verbose than Java-based frameworks and its syntax is much cleaner than PHP-based frameworks. This makes applications simpler to developer, easier to read and maintain.
Major Features:
- Runs on Mac, Linux, Windows, Windows Mobile, and on the Google App Engine
- Requires no installation and can run off a USB drive
- Has no configuration files. You just unzip it and click on it
- Includes a multi-threaded wsgi-compliant web-server (also works with Apache and others)
- Includes a transaction-safe relational database (sqlite)
- Includes a web-based integrated development environment (demo)
- Includes a ticketing system to help you debug deployed applications
- Includes a sophisticated Database Abstraction Layer that can handle joins, left joins, nested selects, aggregates, transactions and distributed transactions. Writes SQL code for you, transparently and in real time, for SQLite, PostgreSQL, MySQL, MSSQL, FireBird, Oracle and IBM DB2 (since 1.58)
- Automatically generates a web-based database administrative interface for your applications
- Prevents the most common types of vulnerabilities: Cross Site Scripting, Injection Flaws, and Malicious File Execution
- Enforces good Software Engineer practices (Model-View-Controller design, Server-side form validation, postbacks)
- Includes internationalization support and a web based translation interface
- Includes functions for caching in ram, disk, memcache and combinations thereof
- Includes libraries for Authentication (login, logout, registration, change password, etc.)
- Includes libraries for Authorization (Role Based Access Control)
- Includes libraries to generate and process Create/Update forms directly from a database
- Includes libraries to handle HTML, ATOM, RSS, RTF, JSON, AJAX, XML-RPC, CSV, REST, WIKI
- Works with Flash/Flex via PyAMF and Google Web Toolkit via Pyjamas
- Includes jQuery for Effects and Ajax
- Includes a powerful Python-based template language to render objects into HTML or other text-based protocols
- Handles automatically upload and download streaming for large media files
- Includes portable cron mechanism for creating and running recurrent tasks in background
- Allows to bytecode-compile applications and distribute them in closed source
- Backward compatibility is guaranteed for the web2py API since 1.0
(since 1.58) - Automatically generates a web-based database administrative interface forLicense:GPL
Apple.com Daily Special 1.58
Apple.com Daily Special - Widget displays daily discounted products from The Apple Store more>>
Apple.com Daily Special widget displays the days current-selling product. A link to Apples current Special Offers website is also provided for access to other incredible deals.
Apple.com Daily Special CANADA 1.58
Apple.com Daily Special CANADA - Check the days current-selling more>>
Apple.com Daily Special CANADA is a widget that displays the days current-selling "hot deals".
Apple-Discounts.com is an online destination for Macintosh users, providing up-to-the-minute details on discounted products available at the Apple store.
Apple-Discounts.com displays these current-selling "hot deals" in a timely and easy-to-read format.
Enhancements:
- Revised interface design/layout to improve copy readability
- Page: 1 of 1
- 1
