Monthly Archives: September 2020

Hands on Hacking

The team over at Hacker House has recently released their first book, Hands on Hacking. The book is an incredibly accessible guide for learning pentesting and purple teaming and includes often-overlooked subjects like building a business case for hacking, ethical guidelines, and report writing. 

Report writing, you say?

Needless to say, when authors Matthew Hickey and Jennifer Arcuri reached out to let us know they were featuring Dradis in the chapter on reporting, we were delighted. Since the book’s release, I’ve been able to chat with Matthew to ask about writing this book, his start in hacking and growing a career in the industry, and his favorite reads. 

You can read the full interview with Matthew Hickey at the Dradis Academy.

Hands on Hacking takes a holistic approach to hacking appropriate for those just getting started as well as for management and sysadmins wanting a deeper understanding of the attacks their organization and systems face. 

Want to win a copy of Hands on Hacking?

The team over at Wiley sent us a few copies to giveaway. To enter, share your email address with us below. Winners will be selected at random on October 9, 2020 and contacted at the email address provided to collect shipping information.

The contest is now over, thanks for entering!

New in Dradis Pro v3.9

Dradis Framework is a collaboration and reporting tool for information security teams to manage and deliver the results of security assessments, in less time and with less frustration than manual methods.

MS Word Filters – OR, NOT

Filtering content using OR and NOT hasn’t been possible until now! Now you can add OR and NOT operators to create a dizzying amount of control for your report output. As always, you can string together multiple filters to get the results you want to populate your report.

Imagine That!

We’ve added the ability to upload an image anywhere the editing toolbar appears. Dragging and dropping into the editing area works too, saving you a few steps to add images in your project to show evidence, support your statement, or even add a meme to your comment.

Even More Validation

Meme of cartoon shouting validate all the things

Validating your project before generating it has long been available as a good step to preventing some of the most common report errors. Now, view additional validation in summary views and a panel to help avoid those errors as you are working with report content to catch problems early.

For an at-a-glance way to see what needs a bit more work, the issues and evidence tables include a column showing if that item contains the correct information.

Looks like something needs to be modified…

Issues, evidence, and content blocks now have a validation panel that will highlight problems as you work.

That missing vector could cause problems, glad we caught it now!

Release Notes

  • Add a validation panel for Issues, Evidence, and Content Blocks
  • Add a validation column for Issues and Evidence table
  • Auto upload attachments and screenshots without requiring the use of the staging area
  • Cards, Evidence, Issues, and Notes now have their own attachment support
  • Displays a notification badge in the browser tab when there are unread notifications
  • Editor: Allow drag & drop, copy & paste, and direct image uploading
  • Increase the node properties column size by changing it to LONGTEXT
  • Layout: Breadcrumbs have a fixed position
  • Upload Manager: better validation
  • Bugs fixed:
    • Live filtering of templates (methodologies, notes & projects) via sidebar
    • Use absolute send times in notification emails instead of relative
  • Reporting enhancements:
    • Excel: Fix report generation exceeding the maximum cell limit
    • Word: Add NOT and OR operation for filtering content control
    • Word: Allow non-English localization documents to be exported