Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [WEB SECURITY] HTTP Proxy for thick clients |
|---|---|
| Date: | Tue, 28 Aug 2007 00:34:21 -0400 (EDT) |
Here is a trick that often works. Open IE and assign the proxy settings to be paros. IE allows the global setting of a proxy in windows and many applications support inheritance of this setting (I can't recall the exact name at the moment). This may allow you to reassign the setting when nothing is exposed in your application. This works even if your default browser is not IE. It is also an interesting way to see which applications speak HTTP if you leave it running overnight. Regards, - Robert http://www.cgisecurity.com/ Application Security news and more http://www.webappsec.org/ http://www.qasec.com/
List, I am testing a .NET thick client application using web services. I am looking for an HTTP/TCP Proxy tool like PAROS / BURP which I can use to see the change the traffic. The application does not have a way to set proxy setting so I cannot use paros / burp and then do proxy chaining. Also, everything on the tunnel is SSL, so ethereal is not much help Also, any good tools to edit XML / SOAP traffic Thanks for suggesstions in advance ---------------------------------------------------------------------------- Join us on IRC: irc.freenode.net #webappsec Have a question? Search The Web Security Mailing List Archives: http://www.webappsec.org/lists/websecurity/ Subscribe via RSS: http://www.webappsec.org/rss/websecurity.rss [RSS Feed]
------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | HTTP Proxy for thick clients, Huan Chi |
|---|---|
| Next by Date: | Re: CEH Books, Peter Manis |
| Previous by Thread: | RE: [WEB SECURITY] HTTP Proxy for thick clients, Ofer Shezaf |
| Next by Thread: | Re: [WEB SECURITY] HTTP Proxy for thick clients, charlie derr |
| Indexes: | [Date] [Thread] [Top] [All Lists] |