Samurai Web Testing Framework
- September 14th, 2008
- Posted in Featured . Tools
- Write comment or click if you like the post:

They say there is a Linux distro for every niche market out there, and Samurai Web Testing Framework (WTF?) is no exception. Description from their website:
The Samurai Web Testing Framework is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing and attacking websites.
Niche indeed. Though I really think this will be a handy addition to any onsite pentester’s library. Some of the tools such as w3af are fairly outdated, though it can’t be blamed on the creators, since all of w3af’s current work is only seen in their SVN and nobody wants unstable software on their livecd (or do they?).
To cut to the chase, SWTF is what it is. It doesn’t try to be the “be all end all” of pentest livecd’s (*coughbacktrackcough*) therefore, the devs don’t have to keep up with a ton of dependencies, and can spend more time focusing on getting the core apps to play nice with eachother. I didn’t have any problem getting it up and running in VirtualBox, which to me is a true testament of hardware compatibility (thanks to Ubuntu). I have yet to encounter a distro that would load in Virtualbox and not run on any of my other equipment.
If you need it, get it. If you find any bugs, be sure to report them on their SF bug tracker. Don’t let community inactivity cause this project to fail like so many others have in the past.




Justin Searle announced this on the SWTF mailing list:
We now have version 0.2 uploaded to SourceForge. Please check it out
and let us know what you think. This only had minor updates like new
sounds, but ratproxy and paros should both be working now.
Were working on 0.3 and hope to get it up by the end of October, and a
0.5 release by then end of November featuring the new KDE 4.1 based on
Kubuntu 8.10.