----- Forwarded message from Salcocho Noticioso <feedblas...@hcg.sld.cu> -----
Date: Thu, 18 Feb 2016 23:04:14 -0500 From: Salcocho Noticioso <feedblas...@hcg.sld.cu> To: laz...@hcg.sld.cu Subject: Brakeman Vulnerability Scanner for Ruby on Rails [The World of IT & Cyber Security: ehacking.net] X-Mailer: feedblaster.rb - ruby 2.3.0p0 (2015-12-25 revision 53290) [x86_64-linux] Brakeman Vulnerability Scanner for Ruby on Rails Brakeman is an open source static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Unlike many web security scanners, Brakeman looks at the source code of your application. This means you do not need to set up your whole application stack to use it. Once Brakeman scans the application code, it produces a report of all security issues it has found. [brakeman] Advantages No Configuration Necessary Brakeman requires zero setup or configuration once it is installed. Just run it. Run It Anytime Because all Brakeman needs is source code, Brakeman can be run at any stage of development: you can generate a new application with rails new and immediately check it with Brakeman. Better Coverage Since Brakeman does not rely on spidering sites to determine all their pages, it can provide more complete coverage of an application. This includes pages which may not be ‘live’ yet. In theory, Brakeman can find security vulnerabilities before they become exploitable. Limitations False Positives Only the developers of an application can understand if certain values are dangerous or not. By default, Brakeman is extremely suspicious. This can lead to many “false positives.” Unusual Configurations Brakeman assumes a “typical” Rails setup. There may be parts of an application which are missed because they do not fall within the normal Rails application layout. Only Knows Code Dynamic vulnerability scanners which run against a live website are able to test the entire application stack, including the webserver and database. Naturally, Brakeman will not be able to report if a webserver or other software has security issues. Download and read more at Installation Using RubyGems: gem install brakeman Using Bundler: group :development do gem 'brakeman', :require => false end Usage From a Rails application's root directory: brakeman Outside of Rails root: brakeman /path/to/rails/application [ehacking] [ehacking] [ehacking] [ehacking] [ehacking] [ehacking] [ehacking] [ehacking] [ehacking] * ----- End forwarded message ----- -- -------- Warning! ------------ 100'000 pelos de escoba fueron introducidos satisfactoriamente en su puerto USB. ______________________________________________________________________ Lista de correos del Grupo de Usuarios de Tecnologías Libres de Cuba. Gutl-l@jovenclub.cu https://listas.jovenclub.cu/cgi-bin/mailman/listinfo/gutl-l
