MagicTree

MagicTree 1.3 - important bug fixes and support for IBM Rational AppScan

We have released MagicTree 1.3. It fixes several nasty bugs that may lead to data corruption. We recommend everybody who uses MagicTree to upgrade. New features include support for AppScan XML and better handling of Imperva Scuba XML

Here is the full change log:

MagicTree 1.2 Is Out

MagicTree 1.2 is available for download. New features in this release:

  1. Metasploit XML import (issue #228)
  2. Support "critical" severity from Nessus 5 (issue #254)
  3. XSLT export. MagicTree data can now be exported as arbitrary XML. An XSLT for nmap-format export is provided. Use case: merge multiple nmap files, then export as one file to use in Nessus scan (issue #77)
  4. Importing exploitability data from Nessus
  5. Added "Save file as..." button to XML file view

MagicTree 1.1 Released

MagicTree 1.1 is released and available for download. This release includes:

  1. Rapid 7 NeXpose XML import (both simple XML and full XML formats are supported)
  2. Arachni XML import (as of 0.4.0.2. Thanks to Herman Stevens of Astyran for contribution)
  3. OWASP Zed Attack Proxy XML import (development snapshot as of 6-Feb-2012)
  4. New matrix query interface
  5. Bug fix (#224) Remove orphan projects does not work anymore
  6. Bug fix (#226) NPE in dumpData()

NeXpose XML - A Rant

As promised here I am working on XSLT for Rapid7 NeXpose XML reports.

There is one great big problem though. "NeXpose Simple XML" format (which is the only XML format available, at least in community edition) contains almost no vulnerability information.

Tags: 

MagicTree 1.0 Released

We are happy to announce that MagicTree version 1.0 is released and available for download.

We would like to thank everybody who submitted bug reports, feature requests or just wrote to tell us that they love MagicTree. You helped a lot!

Version 1.0 includes a lot of bug fixes and a number of new features, such as:

* Support for Acunetix data import
* Support for W3AF data import

MagicTree Build 1559

I've just uploaded MagicTree build 1559, which includes fixes for bugs we have found while working on the PenTest Magazine article.

We are working hard on the next release of MagicTree. We hope to have it out before the end of September.

Tags: 

Taming Vulnerability Data - Our article on MagicTree in PenTest Magazine

Update 2011/09/17: MagicTree build 1559 mentioned in the article is available for download.

PenTest Magazine has published our article Taming Vulnerability Data in its September extra issue along with a MagicTree review by Aby Rao.

MagicTree FAQ and Build 1487

We have started a FAQ page for MagicTree. If you have a questions that should be added, please comment.

We have also posted MagicTree build 1487 for download. It contains various bug fixes, in particular in XML parsing, and minor UI improvements.

Tags: 

MagicTree vs. Dradis

Note: this post is unfinished - two videos are missing
Correction: Dradis can do reports in Word format

Several people have noted that MagicTree is similar to Dradis. In this post I will try to make a point by point comparison, outlining out both similarities and differences. Obviously, I have a bias - being MagicTree developer, I know MagicTree a lot better than Dradis. Feel free to correct me or point out the features that I have missed.

Tags: 

Video: Using MagicTree for Analysing Data

This video was going to be the first in a series of three. However I got stuck with the second one, so instead of waiting for the inspiration to hit me, I thought I'll publish this one anyway. Enjoy.

Pages

Subscribe to RSS - MagicTree