cyphersec A blog about Web Application Security and .NET development best practices

Tools

OWASP Code Crawler
http://codecrawler.codeplex.com

I'm the Project Leader of OWASP Code Crawler. A Microsoft .NET Framework 3.5 Windows Form application built during my partecipation at OWASP Summer of Code 2008. It's a code review tool which analyze (both locally and remotely) source code files. Code Crawler provides a stable reporting system generating HTML and Word documents as well as some other interesting features. Code Crawler is sponsored by OWASP Summer of Code 2008; Jetbrains has also provided an Open Source license of Resharper.

Traversal Path Fun
.rar archive

An experimental tool I wrote almost three years ago as proof of concept. Microsoft .NET Framework 2.0 is required.

Google 2 TXT
.zip archive

Validation Framework
.rar archive

Object Oriented Validation Class library for .NET developers, help developers writing and evaluating input as they are processed by web/win forms applications without the hassle of dealing directly with regular expressions. For more details please refer to this post.

GHiL / Google Hacking is Lame

Google Hacking is Lame is a .NET Console Application built to automatically download different types of files using Google Hacking techniques. It does not require any Google Key for the process. Just type what kind of files you'd want to download, specify the drop point and hit enter. Example of use could be: GHiL.exe -dp c:\droppoint\ -s web.config.

Built using both, the amazing Google-api-for-dotnet and .NET Framework 3.5 this application is not freely available. Please drop an email if you'd like to use or improve it and I will glady share the source with you.

TestRoutingHandler
.rar archive

Not a real tool but a fully working example of an application that supports the new ASP.NET 3.5 SP1 features "Routing". I'll park this code here so I could easly pick it up later when needed.

AjaxToolkitExamples
.rar archive

Same as TestRoutingHandler. It's an ASP.NET 3.5 sample application with working code for most of the AJAX prebuilt controls that comes with ASP.NET Ajax Toolkit. I'll park this code here so I could easly pick it up later when needed.