Google Releases Security Reconnaissance Tool Skipfish
Article by George Norman
On 23 Mar 2010
Skipfish is a new tool that Mountain View-based search engine giant Google rolled out to help web developers build secure and reliable web applications. According to Google, the safety of the Internet is “of paramount importance” to the company – that is why it added Skipfish to its list of security-oriented offerings, such as ratproxy or the Browser Security Handbook.

Skipfish is an open source, fully automated, active web application security reconnaissance tool that can provide three things to the developer that wants to create a reliable and secure web application. First of all the application provides high speed – as many as 2000 requests per second, highly optimized HTTP handling and a minimal impact on the CPU.


Second of all, Skipfish offers ease of use. As detailed by Google-employed whitehat hacker and security expert from Poland, Michał Zalewski, “the tool features heuristics to support a variety of quirky web frameworks and mixed-technology sites, with automatic learning capabilities, on-the-fly wordlist creation, and form autocompletion.”

Thirdly, Skipfish offers cutting-edge security logic. The development team behind the security reconnaissance tool included things like high quality, low false positive, differential security checks that can detect a multitude of subtle flaws (this means injection vectors as well).

“As with ratproxy, we feel that skipfish will be a valuable contribution to the information security community, making security assessments significantly more accessible and easier to execute,” commented Zalewski.

Skipfish is available for download here.

In related news, the big news this week is that Google stopped censoring search results on its Chinese search engine, This is not to say that Chinese internauts can go to, enter a query and get results that were previously censored. It means that visitors to are redirected to (Google Hong Kong). The Hong Kong search engine, unlike the Chinese one, does not filter search results. It remains to be seen if the Chinese authorities are going to reach by putting behind the Great Firewall of China.

Tags: Google, Skipfish, Security
About the author: George Norman
George is a news editor.
You can follow him on Google+, Facebook or Twitter

I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 17 Aug 2017
With the blockbuster movie season upon us, Sony decided to celebrate the occasion with a sale: the Attack of the Blockbusters Sale that offers discounts of up to 50% (60% if you’re a PlayStation Plus member) on a ton of PS4 video games.
By George Norman on 17 Aug 2017
Samsung’s new T5 portable solid-state drive (PSSD) uses the latest 64-layer V-NAND technology, offers between 250GB and 2TB of storage capacity, has a lightweight and shock-resistant design that’s smaller than the average business card, and delivers industry-leading transfer speeds of up to 540 MB/s.
Related News
Sponsored Links
Hot Software Updates
Top Downloads
Become A Fan!
Link To Us!
Google Releases Security Reconnaissance Tool Skipfish
HTML Linking Code