Michal Zalewski (lcamtuf), a Polish security researcher and author of many tools and books, is at it again. On Friday, he released a fully automated, active web application security tool known as skipfish. This tool allows developers and security professionals to have a solid reconnaissance tool which scans at high speed tools, easy to use, and has a number of different security checks with limited false positives. In my particular environment, we are extremely budget poor (taking a 2nd budget cuts within under 6 months left in the fiscal is bad and I ...