 |
 |
 |
|
|
|
ntoinsight 2.0
ntoinsight is a free web site analysis tool capable of quickly crawling a web site to discover site content, resources/attributes and general web site security exposure. As a command line tool, ntoinsight can be used by developers, QA staff, as well as IT and security personnel to quickly gain an understanding of site architecture and content in order to proactively mitigate security exposure and gain general awareness of a web site.
KEY FEATURES:
- Identifies site interdependencies, including links sending data to third party web sites
- Catalogs site resources and their attributes
- Provides resource attribute details
- Identifies web server platforms
- Crawls by URL, hostname or IP/IP range
- Present data in concise, graphical HTML reports
ntoinsight uses graphical HTML reports to communicate security exposure factors and site structure. By excluding all non-interactive site content (e.g. static HTML, etc.), ntoinsight quickly shows how site complexity should affect security planning based on inherent site exposure. Resources that interact directly with the web server, application server or database (resources we call "Attack Points") are categorized based on their attributes and their intended functionality. Detail reports actually capture and convey the granular variables of each resource, including cookie data, hidden fields, form variables, authentication attributes and more.
SYSTEM REQUIREMENTS:
- Pentium 3 or higher processor
- Minimum 512MB RAM
- MS Windows 2000 or XP
- MSXML 4.0 SP2
- Web browser (to view reports)
- MS Internet Explorer 5.5 or greater
(Note: Reports can be viewed with any browser, but tool depends on IE libraries)
|
|
|
 |
