Bug#489282: ITP: ratproxy -- web application security audit tool
Package: wnpp
Severity: wishlist
Owner: Iustin Pop <iusty@k1024.org>
* Package name : ratproxy
Version : 1.51
Upstream Author : Michal Zalewski <lcamtuf@google.com>
* URL : http://code.google.com/p/ratproxy/
* License : Apache-2.0
Programming Lang: C
Description : web application security audit tool
A semi-automated, largely passive web application security audit tool,
ratproxy is optimized for an accurate and sensitive detection, and
automatic annotation, of potential problems and security-relevant design
patterns based on the observation of existing, user-initiated traffic in
complex web 2.0 environments.
It detects and prioritizes broad classes of security problems, such as
dynamic cross-site trust model considerations, script inclusion issues,
content serving problems, insufficient XSRF and XSS defenses, and much
more.