dradis

dradis was designed to be an open source tool for sharing information during Security Testing.

While plenty of tools exist to help in the different stages of the test (information gathering, discovery, exploitation, etc.) not so many exist to share interesting information captured.

When a team of testers is working on the same set of targets having a common repository of information is esential to avoid duplication of efforts. Nevertheless, having all the information in a single place will make the task of reporting a lot easier :)

Not sharing the information available in an effective way will result in exploitation oportunities lost and the overlapping of efforts.

The main benefits derived from the use of dradis are: ￭ information is organized ￭ it saves time, both while testing and while reporting ￭ the knowledge is effectively shared ￭ it is also good for one-man testing