GitXplorerGitXplorer
m

appscan_scripts

public
1 stars
0 forks
0 issues

Commits

List of commits on branch master.
Unverified
7e142e7d3b1d717d9c88619121bcf6d29b02a0ca

if no file given in arguments, ask for one with tkfiledialog

mmcgyver5 committed 11 years ago
Unverified
38da3a06fe0d2dc06357eb774fafa22742b2436f

enable issue

mmcgyver5 committed 11 years ago
Unverified
f25c67ec7b853d418c8cee862e284fb3232a444f

help statements for command line usage.

mmcgyver5 committed 11 years ago
Unverified
207e26f95cc141c70eac601eca6250d1e4be9ef1

Merge https://github.com/mcgyver5/appscan_scripts

mmcgyver5 committed 11 years ago
Unverified
a073fc286122e3283bd6819c3cccbdcff35c4233

make it handle space variations better

mmcgyver5 committed 11 years ago
Unverified
2670753bff8fda12c3286e8543b700a29a0c3065

Update README.md

mmcgyver5 committed 11 years ago

README

The README file for this repository.

appscan_scripts

scripts that help with IBM Rational Appscan

this is a bunch of scripts I use with appscan:

  1. extract_url.py == sometimes I run a report and I want to extract URLs and parameters to a text file

  2. save report from appscan as text file (make sure you check application data and application URLs

  3. run extract_url.py -f yourSavedFile.txt -d yourNewFile.txt [-o csv|txt] (defaults to csv)

  4. import_url.py == sometimes I want to digest a war file and import the urls this script finds into appscan

  5. import_params.py == sometimes I want to search a war file or a source tree for hidden parameters or action URLs and import those into appscan.

  6. import_veracode.py Import from veracode. Sometimes I want to parse a veracode report and import the results into appscan.

  7. custom_strings.txt These are attempts at custom attacks (OGNL, coldfusion, hacking techniques from whitehat lists)

  8. what_happened.py This is a script to read the appscan logs and compare to crashes (both of appscan and the application being attacked) to see if a particular request was to blame. If there is already a way to do this, then this file will turn into text document of instructions for doing it.