Bula Everyone,

For those who have never been, I do highly recommend a trip to Fiji. I just came back from a week on Tokoriki Island off the coast of Nadi. I am highly refreshed and am ready to jump back into work and be more proactive with my security blogs…

Also, a very warm hello goes out to most of my friends at black hat. Thanks for the wake up call whilst you were all partying in Vegas but I only received the voice message when I got back (Golden Rule in Fiji: No Technology Allowed). 

Finally, I did receive some comments regarding the STS Scanner and why it lacked a number of plugins that I could easily write up. It’s true, I could easily write them up and I have with some other much more useful features, but I use this version for company use only. The online version is really just a baseline to teach people more about the ideas and frameworks that can be used to build a web application security scanner. It is not meant to be exhaustive with features and add-ons, as that may confuse the point of the tutorial and would most likely only be used by script kiddies. Of course, anyone who understands what I have coded can easily add more features on as that was the point of why I purposely made the tool extensible.

Vinaka