Government Security
Network Security Resources

Jump to content

Photo

Compiled Skipfish Security Tool For Windows

- - - - - security windows scanner perl tools ips ids md5
  • Please log in to reply
8 replies to this topic

#1 bspirovski

bspirovski

    Specialist

  • Sergeant Major
  • 118 posts

Posted 22 March 2010 - 01:41 PM

I just compiled the Google Skipfish web scanner for Windows.

The compiling was a breeze after i spent 4 hours toiling with the clean reinstall of cygwin. Nevertheless, i created an archive with all the cygwin libraries included.

Tested to run properly on Win7 and WinXP Pro

Download the archive here
http://rapidshare.co...ted by Bozidar)

or here: http://4qlltw.bay.li...1b.zip?download (post edited by Edu.)


Verification sum:skipfish-1.1b.zip MD5: 6D97FBCB65CAF57A7D74E99C0671AEDA

To run it, just do the following
  • create a report directory (report_outdir)
  • type skipfish -o report_outdir http://target-site
  • let her rip
Will try to keep up with recompiliing the editions, will post the latest in the downloads section of my blog

Have fun!
Bozidar Spirovski
http://www.shortinfosec.net

#2 Guest_DiabloHorn_*

Guest_DiabloHorn_*
  • Guests

Posted 22 March 2010 - 02:11 PM

interesting , how do the speeds hold up and such? have you tested the tool to see how many false positives it generates?

#3 Edu

Edu

    First Sergeant

  • Members
  • 2,269 posts

Posted 22 March 2010 - 02:31 PM

thank you bud for the contribution. Am also adding an alternate link to this file. (uploaded it to my skydrive┬┤s public folder, in case RS deletes it.

cheers.
http://www.secumania.net - Secumania security blog.


Embed any executable in a JPEG image and get it to run upon opening the image with this cool tool that abuses a feature of GDI in Windows systems. for governmentsecurity.org members only! click here to get it!

#4 bspirovski

bspirovski

    Specialist

  • Sergeant Major
  • 118 posts

Posted 23 March 2010 - 01:48 AM

interesting , how do the speeds hold up and such? have you tested the tool to see how many false positives it generates?


Speed varies greatly, sometimes it's lightning fast, sometimes it is as slow as death. Still trying to figure out what infulences this speed variation. Also, the beta releases are changing so fast (several times a day) i'm afraid that extensive testing will be obsolete until things get more stable.
Bozidar Spirovski
http://www.shortinfosec.net

#5 Guest_DiabloHorn_*

Guest_DiabloHorn_*
  • Guests

Posted 23 March 2010 - 10:17 AM

ah ok, good to hear you are heavily involved.

#6 bspirovski

bspirovski

    Specialist

  • Sergeant Major
  • 118 posts

Posted 23 March 2010 - 01:34 PM

Seeing that skipfish releases are changing twice a day, I am starting a persistent post on my blog to publish the latest versions of skipfish compiled for Windows.

Here is the link to the post for future versions
http://www.shortinfo...or-windows.html

The current version (1.13b) can be downloaded here
http://rapidshare.co...pfish-1.13b.zip

Also, I tried to write a java gui for skipfish, didn't manage to finish it - it will take more time. When I finish it, it will be included in the package

Regards to all
Bozidar Spirovski
http://www.shortinfosec.net

#7 WaKkO

WaKkO

    Private First Class

  • Members
  • 27 posts

Posted 29 April 2010 - 03:51 AM

Check out this website which gets updated periodically with the latest versions of skipfish compiled for windows:

http://www.shortinfo...or-windows.html
Wouter Veugelen | Security Consultant
http://www.voipsec.eu/

#8 webdevil

webdevil

    Retired GSO General

  • Sergeant Major
  • 1,195 posts

Posted 29 April 2010 - 12:54 PM

Check out this website which gets updated periodically with the latest versions of skipfish compiled for windows:

http://www.shortinfo...or-windows.html


???
Read before you reply ;)

#9 muggle

muggle

    Private

  • Members
  • 1 posts

Posted 25 April 2011 - 03:40 AM

Hi guys,

Can sumone please tell me how to run skipfish in windows vista.

I have downloaded the skipfish files from http://rapidshare.co...ipfish-1.1b.zip

What am I supposed to do next? Should I place this unzipped skipfish files in any location? open command prompt and type something to make it run? am a begginer nd i dont know anything. Please help.

Thanks.





Also tagged with one or more of these keywords: security, windows, scanner, perl, tools, ips, ids, md5