Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: [WEB SECURITY] HTTP Proxy for thick clients

Subject: Re: [WEB SECURITY] HTTP Proxy for thick clients
Date: Tue, 28 Aug 2007 00:34:21 -0400 (EDT)
Here is a trick that often works. Open IE and assign the proxy settings to be 
paros. IE allows
the global setting of a proxy in windows and many applications support 
inheritance of this setting
(I can't recall the exact name at the moment). This may allow you to reassign 
the setting when
nothing is exposed in your application.  

This works even if your default browser is not IE. It is also an interesting 
way to see which
applications speak HTTP if you leave it running overnight. 

Regards,
- Robert
http://www.cgisecurity.com/ Application Security news and more
http://www.webappsec.org/
http://www.qasec.com/

List,

I am testing a .NET thick client application using web services. I am 
looking for an HTTP/TCP Proxy tool like PAROS / BURP which I can use to see 
the change the traffic. The application does not have a way to set proxy 
setting so I cannot use paros / burp and then do proxy chaining. Also, 
everything on the tunnel is SSL, so ethereal is not much help

Also, any good tools to edit XML / SOAP traffic

Thanks for suggesstions in advance




----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>