Penetration Testing mailing list archives

Paros 3.2.7 release


From: contact () parosproxy org
Date: 4 Nov 2005 14:16:39 -0000

Paros 3.2.7 is released.  This is an enhancement with various fix.  All users are recommended to upgrade to this 
version.

The new verison is available at http://www.parosproxy.org.

Bug reports and comments on Paros can be sent to [contact at parosproxy org]. Please feel free to send any comments to 
us!

[Installation]

If you have installed the old version on or after 3.2.4, you can directly install this new version.

If you are using version prior to 3.2.4, you should uninstall the old version first.

The default installation is changed to use the 64M VM. For large site testing, you may adjust it depending on your need
and the memory you have (eg 128M)


[introduction]

Paros is a man-in-the-middle proxy and application vulnerability scanner. It allows
users to intercept, modify and debug HTTP and HTTPS data on-the-fly between web
server and client browser. It also supports spidering, proxy-chaining, filtering
and application vulnerability scanning.


[License] - Clarified Artistic License (open source and GPL-compatible license)


[Details/new features]


3.2.7
=====
New
-       Export a HTTP response body to file.  Eg gif, images, swf, PDFs.
-       Use updated external library.
-       Further improved proxy performance and UI responsiveness.
-       Add new popup menu "Scan History" to support scanning a single Http message within History panel.
-       New Lotus Domino default files check.  Thanks to the user contributing this.

Fix
-       Further fix the security concern that hsqldb may still be accessed by local user on the same computer.
        Thanks to the user further point this out. Now hsqldb is running as in-process database.
-       bug in analyser.  Now correctly differentiate for fixed friendly 404 custom page.  Checks for default files are 
more accurate.
-       Find dialog does not work for Resend window.

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: