14 DAY TRIAL // Cisco has decided to make Kvasir – the company’s web-based penetration testing application – open source to allow experts to analyze it, integrate it and update it.
Kvasir is designed to homogenize information collected from various sources, such as exploitation frameworks and vulnerability scanners, into a single database structure. One important feature of the tool is that it allows multiple testers to work on the same data.
It currently supports Rapid7 Nexpose Vulnerability Scanner, Metasploit Pro, Nmap Security Scanner, ImmunitySec CANVAS, THC-Hydra, ShodanHQ, John the Ripper and other tools.
Cisco’s Kurt Grutzmacher has noted in a blog post that Kvasir is “not perfect but it’s grown up a lot and will improve.”
Additional technical details on Kvasir are available on Cisco’s website.
Download Kvasir from Github