Yahoo! has open-sourced Gryffin – a Web Application Security Scanner – in an aim to improve the safety of the Web for everyone.
Currently in its beta, Project Gryffin has made available on Github under the BSD-style license that Yahoo! has been using for a number of its open-sourced projects.
Gryffin is basically a Go & JavaScript platform that helps system administrators scan URLs for malicious web content and common security vulnerabilities, including SQL Injection and Cross-Site Scripting (XSS).
Yahoo! describes Gryffin as a large-scale Web security scanning platform, which is more than just a scanner, as it is designed to address two specific problems:
- Coverage
- Scale
Scale is obviously implied for large Web, while Coverage has two dimensions – Crawl and Fuzzing.
Crawl's ability is to find as much of the Web application's footprint as possible, whereas Fuzzing involves testing each part of the application's components for an applied set of vulnerabilities.
Gryffin's Crawler is designed to search "millions of URLs" that might be driven by a single template from just one of the URLs to work.
Moreover, the crawler also includes a de-duplication engine for comparing a new page with an existing one and thus allowing it to avoid crawling the same page twice.
Gryffin's Crawler also has PhantomJS, which is used to handle DOM rendering in client-side JavaScript applications.
Gryffin's Requirements
The requirements for Gryffin are as listed below:
- Go
- PhantomJS v2
- The NSQ distributed messaging system
- Sqlmap for fuzzing SQL injection
- Arachni for fuzzing XSS and Web vulnerabilities
- Kibana and Elastic Search for dashboarding
Besides Yahoo!, many major companies have released their own web application vulnerability scanners to make Internet experience safe for users.
Back in February, Google released its own free web application vulnerability scanner tool, dubbed Google Cloud Security Scanner, which potentially scans developers' applications for common security vulnerabilities on its cloud platform more effectively.
Ignore the following :
yahoo scanner detector,yahoo scanner groups,
yahoo scanner group new hampshire,
yahoo scanner ip,
scanner yahoo answer,
yahoo invisible scanner 2012,
yahoo virus scanner,
yahoo mail scanner,
yahoo invisible scanner 2011,
yahoo password scanner,
yahoo scanner checker detector,
yahoo scanner,
yahoo avatar scanner,
yahoo alt scanner,
police scanner yahoo answers,
yahoo id available scanner,
driver scanner yahoo answers,
invisible scanner yahoo and facebook,
virus scanner yahoo answers,
free driver scanner yahoo answers,
scanner automotriz yahoo,
what is a scanner yahoo answers,
what is a scanner yahoo,
yahoo bond screener,
yahoo buddy scanner,
best yahoo scanner,
yahoo scanner.com,
yahoo scanner check invisible online offline,
yahoo camscanner,
yahoo invisible scanner,
yahoo messenger invisible detector scanner checker,
yahoo invisible detector scanner checker,
scanner caracteristicas yahoo,
yahoo scanner download,
yahoo id scanner download,
yahoo messenger invisible scanner download,
yahoo friends list scanner download,
yahoo scanner detector checker,
scanner darkly yahoo,
yahoo id scanner free download,
yahoo invisible scanner download,
yahoo scanner eu,
yahoo epson scanner forum,
yahoo email scanner,
yahoo alternate email scanner,
yahoo high end scanner group,
yahoo scanner facebook,
yahoo finance scanner,,
invisible scanner yahoo facebook
yahoo messenger invisible scanner free download,
scanner for yahoo,
yahoo invisible scanner 1.0.0 free download,
yahoo imacon scanner group,
screen 1030ai yahoo scanner group,
yahoo scanner hi5,
yahoo invisible scanner hi5,
yahoo new hampshire scanner group,
yahoo scanner invisible detector,
yahoo scanner in,
yahoo invisible scanner » detect who is invisible,
yahoo invisible scanner vizgin,
yahoo invisible scanner software,
scanner java yahoo,
yahoo invisible scanner ym land,
yahoo scanner messenger,
yahoo malware scanner,
yahoo market scanner,
yahoo messenger scanner invisible download,
yahoo messenger scanner,
yahoo mess scanner,
yahoo messenger scanner detector,
invisible scanner yahoo messenger,
ip scanner yahoo messenger,
yahoo name scanner,
yahoo scanner online,
yahoo messenger online scanner
yahoo messenger offline scanner
yahoo invisible scanner offline scanner
yahoo messenger invisible scanner online
o que Ă© scanner yahoo
como usar o scanner yahoo
yahoo police scanner
yahoo profile scanner
scanner portatile yahoo
q es scanner yahoo
yahoo real scanner
que es scanner yahoo respuestas
yahoo scanner status
yahoo stock screener
yahoo spyware scanner
yahoo spam scanner
yahoo scanner detector status
yahoo messenger invisible scanner software download
google yahoo invisible scanner script
yahoo invisible scanner script
scanner stampante yahoo
yahoo unsichtbar scanner
yahoo id scanner viprasys
yahoo mail virus scanner
yahoo email virus scanner
lp yahoo valid scanner
yahoo toolbar virus scanner
vizgin yahoo scanner
yahoo answers free virus scanner
www.yahoo scanner.com
yahoo invisible scanner not working
raio x scanner yahoo
y detector yahoo scanner
yahoo invisible scanner 1.0.0
invisible scanner yahoo 11
download yahoo invisible scanner 1.0.0
yahoo invisible scanner 2013
4 char yahoo id scanner