IronWASP v0.9.0.3!

IronWASP (Iron Web application Advanced Security testing Platform) is an open source system for web application vulnerability testing. It is designed to be customizable to the extent where users can create their own custom security scanners using it. Though an advanced user with Python/Ruby scripting expertise would be able to make full use of the platform, a lot of the tool's features are simple enough to be used by absolute beginners.

Changes made to IronWASP:

This version also has multiple bug fixes and minor feature enhancements. Notably, there is a search feature in the plugin editor and there is a new button to clear the shell output.
Since IronWASP v0.9.0.2 memory consumption has been lesser and stability should be better. Bug fixes have been made to the SQL Injection and Session Analysis plugins as well.

If the system running IronWASP is connected to the internet then you should automatically get a prompt for updating otherwise you can manually download the latest version. If you observe any problems with this version then please mail the list and help improve ithere.

Download IronWASP:
IronWASP v0.9.0.3 – ironwasp.zip

IronWASP Source Code -

https://github.com/Lavakumar/IronWASP

Visit website -
https://github.com/Lavakumar/IronWASP
http://ironwasp.org/

Documentation will be constantly updated and improved, so check this section regularly.
Get started with the video tutorials on:

• IronWASP (11 videos): Part 1 , Part 2 & Part 3
• Plugins (8 videos): Part 1 , Part 2 & Part 3

IronWASP API help:

• Writing a simple fuzzer
• Fuzzing custom data formats
• Offline vulnerability analysis
• Creating Scan Jobs from Scripting Shell
• Embedding Requests in Scripts and Plugins
• Handling custom site behaviour with SessionPlugins

Presentations on IronWASP:

• NullCon 2012 talk titled 'JavaScript Static Analysis with IronWASP' - Download (.pdf) or view on Google Docs
• IronWASP's debut presentation made at Securitybyte 2011 - Download (.pdf) or view on Google Docs

Screenshot -