OWASP goes Open Source (for real)
Code Crawler is now on CodePlex. It has been classified with the following keywords : CodeReview, C#. At the moment I decided to mark the project as Setup which means that the content that will be illustrated is still not available.
From tomorrow on the development will be shifted to CodePlex. Every file related to CodeCrawler previously hosted on cyphersec.com has already been deleted (Sorry for that had no choice).
Also a new beta release version will be linked from the main page which will include a couple of new features.
- Increase stability
- OWASP Code Guidelines support
- Threat Analysis
Current Development Scenario:
In the next two weeks the Grid control used to list all the threats found in your file will be replaced by a new control (BUGID#931 Priority: Medium).
A new functionality will be also included which will make code crawler and advanced tool capable of crawling web applications affected by traversal path vulnerabilities (FEATUREID#940 Priority:Medium).
The Reporting UI will be redesigned from scratch. There is no reason to replace the reporting engine since it has reached a stable version. CC will keep supporting XSLT as standard for the reports area until new "polished" alternatives are proposed and , from a development prospective , well-integrated.
XML Engine and threats discover to be (20% at least) faster. Cracking the system using .NET 3.5 enhancements 
Enhance Welcome Screen (BUGID#928 Priority:Medium); Code Crawler will be fully refined using a combination of black and gray colours. A mix of BlackBerry Style and Windows Vista Ultimate themes.
March 23rd, 2009 - 11:38
Where can a copy of CodeCrawler be downloaded from currently?
March 24th, 2009 - 09:55
Fair enough, my mistake.
Binaries: http://www.cyphersec.com/software_archive/OWASP_Code_Crawler.zip
Source : http://www.cyphersec.com/software_archive/OWASP_Code_Crawler_Source.zip
PPT Presentation: https://www.owasp.org/images/6/61/OWASP_CodeCrawler_Presentation.ppt
Cheers, A
March 24th, 2009 - 10:00
Do you have the source code available yet?
March 24th, 2009 - 10:15
Yes the code can be found here.
It’s a Visual Studio 2008 solution, the code is still not under source control because of a couple of licensing problems (sorted out now, give me a couple of days Rob).