OWASP O2 Platform/Microsoft/CAT.NET

Revision as of 06:16, 4 December 2009 by Dinis.cruz (Talk | contribs)

Jump to: navigation, search

current O2 support

  • Dedicated O2 Module O2_Scanner_MsCatNet with support for
    • finding target dlls (recursive search on local directories)
    • triggering scans
    • converting CAT.NET Results into O2's Findings schema


(from CAT.NET download page)

"...Code Analysis Tool for .NET is a static analysis tool to detect common software security vulnerabilities. CAT.NET 2.0 has been re-written from the ground up implementing the original tainted analysis algorithm developed by Ben Livshits but using the Phoenix compiler infrastructure to provide a solid and scalable core data flow security analysis engine. CAT.NET 2.0 will initially ship around February as a Visual Studio 2010 Power Tool, only available to customers who have a licensed copy of Visual Studio 2010 and then as an integrated part of the Visual Studio product in late 2010. ..."


other relevant links

related blog posts


go back to the main OWASP O2 Platform page