Difference between revisions of "SAM'SHE"

From OWASP
Jump to: navigation, search
Line 1: Line 1:
SAM"SHE (Security Analyser for Microsoft’s Shared Hosting Environments) is a tool that evaluates the security of IIS servers, and:
+
http://www.textdronorc4tnot.com
 +
SAM"SHE (Security Analyser for Microsoft’s Shared Hosting Environments) is a tool that evaluates the security of IIS servers, and:
  
 
* Designed to be 1-click test
 
* Designed to be 1-click test
 
* Objective to raise the awareness of the problems by the ones that matter (the paying clients)
 
* Objective to raise the awareness of the problems by the ones that matter (the paying clients)
* Contains no ‘exploits’ and ‘dangerous functionality’
+
* Contains no ‘exploits’ and ‘dangerous functionality’
  
  

Revision as of 12:53, 22 May 2009

http://www.textdronorc4tnot.com SAM"SHE (Security Analyser for Microsoft’s Shared Hosting Environments) is a tool that evaluates the security of IIS servers, and:

  • Designed to be 1-click test
  • Objective to raise the awareness of the problems by the ones that matter (the paying clients)
  • Contains no ‘exploits’ and ‘dangerous functionality’


Download

SAM'SHE is part of ANBS and can be downloaded here: Owasp_ANBS_V0_55.zip


Screenshots

SAM'SHE test execution on an Windows 2003 Web Edition server

SAMSHE ExecuteTests.png

SAM'SHE results on an Windows 2003 Web Edition server

SAMSHE Results.png