Advanced Penetration Testing for Highly-Secured Environments - Second Edition

Introduction to the Dradis framework

The Dradis framework is a Rails application that can be used to help manage the data overload that can occur when pentesting. With its user-friendly web-based interface, it simplifies data collection throughout the testing cycle, and is priceless when sharing data with your team members.

When combining disparate data sources, such as Nmap, Nessus, and even Metasploit, you will typically need to build some sort of database and then use various methods of managing the imports. Dradis has plugins that allow you to import this data with just a few clicks. Dradis also allows you to upload attachments such as screenshots or to add your own notes to the database.

Tip

The Dradis framework can be installed on Linux, Windows, ...