MagicTree v1.1 – Penetration Testing Productivity Tool

Have you ever spent ages trying to find the results of a particular portscan you were sure you did? Or grepping through a bunch of files looking for data for a particular host or service? Or copy-pasting bits of output from a bunch of typescripts into a report? I have certainly did, and when I heard about the release of this tool, my heart was filled with joy, at last I can now spend time doing the real thing, you know what i mean:).

Lets get it straight for those that don't or haven't had about it.

MagicTree is a penetration tester productivity tool. It is designed to allow easy and straightforward data consolidation, querying, external command execution and (yeah!) report generation. In case you wonder, "Tree" is because all the data is stored in a tree structure, and "Magic" is because it is designed to magically do the most cumbersome and boring part of penetration testing - data management and reporting.

Updates

• Rapid 7 NeXpose XML import (both simple XML and full XML formats are supported)
• Arachni XML import (as of 0.4.0.2. Thanks to Herman Stevens of Astyran for contribution)
• OWASP Zed Attack Proxy XML import (development snapshot as of 6-Feb-2012)
• New matrix query interface
• Bug fix (#224) Remove orphan projects does not work anymore
• Bug fix (#226) NPE in dumpData()
• Bug fix (#239) “Uncaught exception in Swing thread: null. null” when saving a custom query into the repo
• Bug fix (#241) Corrupted reference links in report templates
• Bug fix (#242) Updated report templates to honor “ignore” status

You can download MagicTree here

Delicious Twitter Facebook Digg Stumbleupon Technorati RSS