Difference between revisions of "OWASP/Training/OWASP WebScarab Project"

From OWASP
Jump to: navigation, search
Line 2: Line 2:
 
| Module_designation = [[:Category:OWASP_WebScarab_Project|OWASP WebScarab Project]]
 
| Module_designation = [[:Category:OWASP_WebScarab_Project|OWASP WebScarab Project]]
 
| Module_Overview_Goal =
 
| Module_Overview_Goal =
 
 
Web Scarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is a proxy tool which intercepts Http request and response. It lets us review and modify requests created by the browser before they are sent to the server, and review and modify responses returned from the server before they are received by the browser. It allows editing and replay of previous requests, or creation of entirely new requests. The goal of this project is to have a great tool for manual penetration testing.
 
Web Scarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is a proxy tool which intercepts Http request and response. It lets us review and modify requests created by the browser before they are sent to the server, and review and modify responses returned from the server before they are received by the browser. It allows editing and replay of previous requests, or creation of entirely new requests. The goal of this project is to have a great tool for manual penetration testing.
  
| Content =  
+
| Content =
 
+
 
WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. [http://www.owasp.org/index.php/WebScarab_Getting_Started WebScarab Getting Started] is a great place to start. You can download builds of WebScarab from [http://sourceforge.net/project/showfiles.php?group_id=64424&package_id=61823 here].
 
WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. [http://www.owasp.org/index.php/WebScarab_Getting_Started WebScarab Getting Started] is a great place to start. You can download builds of WebScarab from [http://sourceforge.net/project/showfiles.php?group_id=64424&package_id=61823 here].
 
 
  
 
| Material =  
 
| Material =  
Line 15: Line 12:
 
* [http://yehg.net/lab/pr0js/training/webscarab.php WebScarab movies]  
 
* [http://yehg.net/lab/pr0js/training/webscarab.php WebScarab movies]  
 
* [http://www.owasp.org/index.php/File:OWASPAppSec2007Milan_WebScarabNG.ppt WebScarab NG]
 
* [http://www.owasp.org/index.php/File:OWASPAppSec2007Milan_WebScarabNG.ppt WebScarab NG]
 
+
 
 
}}
 
}}

Revision as of 05:18, 14 April 2010

MODULE
OWASP WebScarab Project
Overview & Goal
Web Scarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is a proxy tool which intercepts Http request and response. It lets us review and modify requests created by the browser before they are sent to the server, and review and modify responses returned from the server before they are received by the browser. It allows editing and replay of previous requests, or creation of entirely new requests. The goal of this project is to have a great tool for manual penetration testing.
Contents Materials
WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. WebScarab Getting Started is a great place to start. You can download builds of WebScarab from here.