Announcement: DefenseCode ThunderScan v1.1 - Web Application Source Code Security Analysis

DefenseCode <[email protected]> Thu, 11 Oct 2012 20:01:31 +0200
Newsgroups gmane.comp.security.websecurity,gmane.comp.security.full-disclosure,gmane.comp.security.penetration
Message-ID <[email protected]>
Hi,

We are proud to present you a new product for comprehensive Web 
Application Security Scanning.
DefenseCode ThunderScan v1.1 for Web Application Source Code Security 
Analysis is available now.

Demo run against Mutillidae v1.3 can be seen here:
http://www.youtube.com/watch?v=dcml2stPYNM&hd=1

DefenseCode ThunderScan products are designed for comprehensive security 
assessment of web application source code in
order to discover critical security vulnerabilities that hackers could 
exploit to compromise web application security.

More information about the product is available here:
http://www.defensecode.com/subcategory/thunderscan-8

ThunderScan v1.1 supported languages:
- ASP.Net C#
- PHP
- Java/JSP
- VB.Net
- Classic ASP

Thunderscan v1.1 will scan web applications for a wide range of security 
vulnerabilities like:
- SQL Injection
- File Disclosure
- Page Inclusion
- Code Injection
- Shell Command Execution
- Cross Site Scripting
- File Manipulation
- Arbitrary File Upload
- Dangerous Configuration Settings
- Arbitrary Server Connection
- XPATH Injection
- LDAP Injection
- HTTP Response Splitting
- Information Leak
- Mail Relay
- Misc. Dangerous Functions
- Dangerous File Extensions
- And more


ThunderScan v1.1 New Features:
- Tainted input flow track interactive analysis
- Automated discovery of custom input functions
- Improved custom functions analysis
- Improved filter detection
- Custom filtering functions detection
- Improved large multiline code handling
- Improved input tracking across multiple functions
- Fixed bug in XML reporting
- Improved Java and C# class detection
- Improved Java and C# class analysis
- Advanced PHP static inclusion algorithm
- Improved PHP PEAR tracking functions base
- Added Java JSON-RPC support

We are continuously working on improving our products and keeping them 
up to date
so you can be sure that all the latest threats get detected.

Kind Regards
--
DefenseCode Team
ThunderScan - Scan your Web Application For Security Vulnerabilities
http://www.defensecode.com/subcategory/thunderscan-8

_______________________________________________
The Web Security Mailing List

WebSecurity RSS Feed
http://www.webappsec.org/rss/websecurity.rss

Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA

WASC on Twitter
http://twitter.com/wascupdates

[email protected]
http://lists.webappsec.org/mailman/listinfo/websecurity_lists.webappsec.org