Nexus: Dradis

Colaboração open-source e relatórios para as equipes de InfoSec #Dradis

By 0x000216

Read

0 Comments

Colaboração open-source e relatórios
para as equipes de InfoSec

Combine a saída de diferentes ferramentas e gere relatórios consistentes.

Colaboração perfeita
- Acompanhe o seu progresso
- Dividir tarefas
- Compartilhar screenshots e provas
Extensível
Já se conectar com mais de 15 ferramentas diferentes , incluindo arroto , Nessus , Nmap, Qualys, etc.
E se não tivermos um conector para a ferramenta X, é fácil criar um!
Plataforma independente
Dradis é um aplicativo da web, você só precisa do seu navegador para usá-lo.

Uma interface que é um prazer trabalhar com

Mais imagens

Integramos com todos os suspeitos habituais:

Visite toda a biblioteca de add-on

Como visto em

Pronto para começar a gerar relatórios consistentes?

Dradis v2.9 - Information Sharing For Security Assessments

By 0x000216

Read

0 Comments

Dradis is an open source framework to enable effective information sharing, specially during security assessments. It’s a tool specifically to help in the process of penetration testing. Penetration testing is about information:

Information discovery
Exploit useful information
Report the findings

But penetration testing is also about sharing the information you and your teammates gather. Not sharing the information available in an effective way will result in exploitation opportunities lost and the overlapping of efforts.

Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead.

Features

Easy report generation.
Support for attachments.
Integration with existing systems and tools through server plugins.
Platform independent.

Traditional pentesting teams face different types of challenges regarding information sharing. Different tools provide output in different formats, different testers capture evidence in different ways, different companies report differently, etc.

If you do not use a tool to share the information, every tester will use their own notes file to keep track of their findings. Each will store this file locally, or on a shared resource, but the information will not arrive immediately to the rest of the team.

If you want to know what are the latest findings of your mate, you will need to look for the notes file. You also can try talking, but talking is not that effective when you need to know a specific cookie value or a sql query for an injection attack.

It seems reasonable that some effort must be put to increase the quality and efficiency of this process.

Download Dradis

[Dradis Pro v1.7] Framework to enable effective information sharing

By 0x000216

Read

0 Comments

Dradis Pro is framework to enable effective information sharing, specially during security assessments.

Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead.

Changelog v1.7

This is the result of eight months of hard work, a bit longer than usual, but the release is packed with lots of handy improvements.

Here are some changes:

New Issue/Evidence architecture: read about why this is a big deal.
New all-in-one view (more below).
New “by host” and “by issue” reporting (more below).
New default project / report template: to make it easy for you to build on top of it.
New interface to import Issues from external sources.
New Qualys upload plugin.
Updated plugins
- Burp upload
  - Generates Issue/Evidence
  - Is orders of magnitude faster.
  - Integrates with the Plugin Manager.
- MediaWiki import is now compatible with versions 1.14 -> 1.21
- Nessus upload generates Issue/Evidence
- Nexpose upload generates Issue/Evidence
Updates and internal improvements:
- Updated to Rails 3.2.13
- Improved code block and table styling

Full Changelog: here

Merge the output from different tools into a single report.

Burp Suite
Nessus
NeXpose
Nikto
Nmap
OpenVAS
OSVDB
Qualys
Retina
SureCheck
VulnDB
w3af
MediaWiki
wXf
Zed Attack Proxy

Deliver consistent results.

Never forget any steps.
Follow your own testing methodology.
Create your own testing methodologies and improve them after every engagement.
Consistent results across projects and clients. Every time.

Everyone on the same page.

Work together towards a common goal.
All the information about the project in a single location where it’s easy to find.

More Information: here

Details Dradis Pro v1.7

Nexus

Colaboração open-source e relatórios para as equipes de InfoSec #Dradis

Colaboração open-source e relatórios
para as equipes de InfoSec

Combine a saída de diferentes ferramentas e gere relatórios consistentes.

Colaboração perfeita

Extensível

Plataforma independente

Uma interface que é um prazer trabalhar com

Mais imagens

Integramos com todos os suspeitos habituais:

Visite toda a biblioteca de add-on

Como visto em

Pronto para começar a gerar relatórios consistentes?

Dradis v2.9 - Information Sharing For Security Assessments

[Dradis Pro v1.7] Framework to enable effective information sharing

Changelog v1.7

Recent Posts

Facebook