Over the last 8 years in IT Security, I've had at least a professional interest in the idea of penetration testing and the opinion of this service has evolved as the IT Security market niche matures and grows.  I wanted to take a minute to discuss it with the readers out there, and maybe solicit some opinions on the ...

Deepak Louis; There are two ways to configure this.  It sounds like you are attempting to perform the first method listed below as A. Method A.  Capture WR traffic as a Macro for replay during WebInspect scans. ** This method is a manual version of how the QTP script script converter tool works within our QAInspect for Quality Center ...

LEAD Technologies Inc. V1.01

The release of WebInspect 7.7.113.3 (the Nov/2007 hotfix release) brought along a significant feature: a new-and-improved audit engine for finding local file reading/inclusion vulnerabilities.  This article will introduce you to this new engine, how it works, and explain how to tune the associated check inputs in order to tailor the engine to ...

This is the third part in my three-part series on check tuning.  Part one addressed the basic concepts of check inputs and tuning checks, while part two addressed some basic network topology concepts.  This part will utilize the previously discussed concepts to tune three specific network-related checks.The three target checks are:  ...

Objective : Integration of winrunner 8.2 with webinspect 7.7, capture HTTP request from one machine and execute scan on another webinspect machine. The following are the changed in configuration that was done 1. Changed the winrunner server IE proxy setting to webinspect server IP address and port. Unchecked all other options. 2. Cleaned up the ...

Launching a web scan is conceptually pretty easy: you just pop in a target URL and click 'Go'.  You don't have to necessarily worry about routing tables, firewalls, and all that other network architecture stuff that magically lets the scanning system talk to the target web site. That is, you don't have to worry about it ...

This is the first article in a three part series that focuses on tuning the checks included with WebInspect (and sister products, DevInspect and QAInspect), with the goal of increasing accuracy and usefulness. By default, the current version of WebInspect ships with thousands of checks.  A 'check' is a generic term used to describe a ...