WebApp Sec mailing list archives

Re: Firefox-based security testing tools


From: Eoin Keary <eoinkeary () gmail com>
Date: Mon, 15 Aug 2005 10:27:35 +0000

Tamperdata is ok if you need a lite penproxy tool.
https://addons.mozilla.org/extensions/moreinfo.php?id=966
Use tamperdata to view and modify HTTP/HTTPS headers and post
parameters. Trace and time http response/requests. Security test web
applications by modifying POST parameters.

Eoin


On 12/08/05, Jeff Robertson <Jeff.Robertson () digitalinsight com> wrote:
What is your favorite Firefox extension for doing things like:

- seeing all forms on a page, with methods and actions
- seeing hidden form fields and their values
- seeing the "value" attribute of the options in a select list
- modifying all of the above on the fly
- doing all of this WYSIWIG, in the main web page, with no need to look at
or edit any HTTP requests

I know there are things that do all this, but I've never gotten around to
installing any of them. Recommendations?

Jeff Robertson
Manager of Web Application Security
Digital Insight



Current thread: