OWASP/Training/OWASP WebScarab Project
Revision as of 12:22, 23 November 2010 by Sandra Paiva
|OWASP WebScarab Project|
|Overview & Goal|
|Web Scarab is a framework for analyzing applications that communicate using the HTTP and HTTPS protocols. It is a proxy tool, which intercepts Http request and response. It lets us review and modify requests created by the browser before they are sent to the server, and review and modify responses returned from the server before the browser receives them. It allows editing and replay of previous requests, or creation of entirely new requests. The goal of this project is to have a great tool for manual penetration testing.
The training will take the format of a demonstration of setting up and using WebScarab. It will cover:
There are two resources for this demonstration:
|WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. WebScarab Getting Started is a great place to start. You can download builds of WebScarab from here.||