MagicTree is a penetration tester productivity tool, it allows easy and straightforward data consolidation, querying, external command execution, and report generation. In case you wonder, “Tree” is because its stores all the data in a tree, and “Magic” because it is designed to magically do the most cumbersome and boring part of penetration testing – data management and reporting.
I think this could be combined with something like dradis (the Open Source Security Reporting Tool) for very good project management.
MagicTree is a closed-source, proprietary software. This release is distributed free of charge and so will be the future releases of MagicTree Community Edition. They plan on offering a reasonably priced professional edition soon.
MagicTree Beta Two is mostly written in Java and has been tested on Linux, Windows, and MacOS. It has no complicated installation procedure.
Documentation is available here:
You can download MagicTree here:
Or read more here.
geekp0wer says
I prefer the report generation for OpenVAS and Nessus in OSSIM. I also use a free Perl script from FYRM, NessusPBE.pl, to consolidate from nbe files into TSV format.
Frisbee says
I was wasting away on twitter trying to find something to cure my boredom – and WHIZ – someone I follow tweeted this post. Now, I am not quite as bored. Thanks for posting awesome material. – Frisbee