Mayflower Blog

Chorizo's standard account already contains recursive scans from the current URL. This means that Chorizo! is able to follow URLs from forms etc. automatically until a recursive level that you are able to set.

From now on, the free accounts also benefit from this feature which makes it very handy to scan sites more deeply. However, we limited the recursion depth to 1, so Chorizo! is able to follow all links etc. on the current page. The standard account is able to scan up to a depth of 3.

To give you a number: some time ago I scanned a popular PHP OpenSource CRM application with one scan through "Scan the current page". With a recursion depth of 3, this lead to more than 10,000 scan requests.

If you want to give it a try, just register on the webpage for the free account.

Geez! What a week. Right after the announces at several newstickers and websites (on heise security German and heise Security English, an extensive German review at dynamic-webpages.de and one in French at nexen.net) on Monday, more than 3,500 users (and counting) registered at our small security sausage tool and created hundreds of thousands security scans on their servers! We try to commoditize PHP security by providing you with free accounts - just go to the Chorizo homepage and register for a free acount. The train is rolling... and we're ready to stack up the commercial accounts with some more features soon.

Finally, one spoiler: Let's wait for the birth of Morcilla (link to Wikipedia), Chorizo!'s small sister. You wanna know what's behind Morcilla? Imagine if Chorizo! would be able to look "behind the scenes" on your server during a security scan ...

Stay tuned! There's more coming up.