1. Introduction
Skipfish is an automated web security scanner released by Google to reduce users ' online security threats. The project address is in http://code.google.com/p/skipfish/.
2, installation
1) Installation of the required software library:
sudoapt-getinstalllibssl0.9.8
Sudoapt-getinstalllibssl-dev
Sudoapt-getinstallopenssl
2) Installation Skipfish:
wget http://skipfish.googlecode.com/files/skipfish-1.69b.tgz
Tar zxvf skipfish-1.69b.tgz
MV skipfish-1.69b Skipfish
CD Skipfish
Make
3 compile complete, generate Skipfish executable program in the directory
CP DICTIONARIES/DEFAULT.WL SKIPFISH.WL
Copy one of the dictionaries to scan
4) for scanning:
./skipfish-o Output_folder http://www.example.com
Where Output_folder is the output directory, you can open index.html to view the scan results after the scan is complete.
References: http://os.51cto.com/art/201109/288870.htm