Jsky Quick Start

1

Click here to load reader

description

NOSEC JSky is another product produced by NOSEC who build Pangolin. It helps you test for the latest vulnerabilities in current Web technologies so that you can find security problems in your applications before the hackers do.NOSEC JSky is a website security testing tool that automates vulnerability assessments. Support all Web application technologies – including ASP, ASP, NET,Java, PHP, JavaScript, Flash, Ajax. Jsky is a fast scanner which covers all Web application vulnerabilities including SQL-Injection and Cross-Site Scripting, WASC TC 2, OWASP TOP 10 compliance. JSky lack the intelligence required to scan the complexities of today's interactive Web 2.0 applications.

Transcript of Jsky Quick Start

Page 1: Jsky Quick Start

NOSEC JSky Quick Start Guide

Software Installation

Before installing JSky make sure that

your system meets the following

minimum requirements:

1 GB of memory

2 GB of free disk space

1600 GHz Processor or better

Microsoft Internet Explorer 6.0

or 7.0

Windows 2000/Windows

XP/Windows Vista 32bit/

Windows Vista 64bit /Windows

7 32bit/Windows 7 64bit

Use the following procedure to

install JSky.

1. Start the installation program.

2. Choose setup language

“English”. On the Welcome

page, click Next.

3. Review the license agreement. If

you accept, select the check box

and click Next; otherwise click

Cancel.

4. On the Destination Folder window,

select the folder into which you

want to install the software and

click Next.

5. Click Next until you see Ready

to Install

6. On the Ready to Install window,

click Install.

7. When the process is complete,

click Finish.

Licensing

The first time you start JSky, the

program displays the JSky Product

Registration Wizard, which prompts

you to select one of the following

options:

Register for a 15-day trial

Use an existing activation token

Trial Registration

Use the following procedure to begin

a free 15-day trial of JSky.

1. On the JSky Tool Bar, Click

License Manager. You will be

link to NOSEC License

Management Center.

2. Following steps and enter the

target website (Url) and other

requested information.

3. License Management Center will

access target website to

complete generate key.

4. Click Apply Key. Now you

have finished Trial Registration.

Using the JSky

Introduction

JSky work area is divided into

following regions:

Scanning Your Website

Starting a Scan

The Scan Wizard allows you to

quickly set-up an automated crawl

and scan of your website.

Step 1: Scan

Click on „File > New Scan‟ to start

the Scan Wizard or click „New Scan‟

button on the tool bar to open JSky

Scan Wizard. Input target Url, such

as : http://www.example.com

www.site.com. Click “Next”.

Step 2: Spider Option

Click “Next”.

Step 3: Scanning Profile

Click “Next”.

Step 4: Other Configuration

Click “Next”.

Step 5: Starting a scan

After click “Finish” on scan wizard

window JSky is ready to start scan.

Click “Start”. Depending on the size

of the website a scan may take

several hours.

Analyzing the Scan

Results

Introduction

A list of vulnerabilities which are

found while scanning the website

starts being populated.

The severity of vulnerabilities is

indicated by the following icons.

High Medium Low Info

Report

After JSky has assessed your site‟s

vulnerability, you can generate

customized reports and save a report

as a file to be opened with a

third-party application. JSky support

DOC, PDF, HTML and XML

format report.

Generate report

After Scan complete click

„File->Report‟, Report Wizard

Windows appears. Then click

“Preview Report” to preview or

“Save” to save report to file.