RE: Hidden Form Field Tool

The tool you are probably looking for is something like WebSlueth -
http://www.sandsprite.com/Sleuth/

If it's any use to anyone out there I'll dig out code for a similar tool
that some of my guys wrote.  Very basic in that it just hosts an IE control
and uses the DOM to modify page elements (so no proxy to change other
elements like cookies, headers, etc).  I'll post the code up to the OWASP
labs site (http://www.owasp.org/software/labs.html) if anyone is interested
in playing.  Still very useful in uncovering bugs and a lot less expensive
that WebSlueth :)

Cheers,
Mike.

====================================================================
Mike Andrews  (mike@se.fit.edu)                 Assistant Professor,
http://www.bug-box.net              Florida Institute of Technology.
====================================================================


> -----Original Message-----
> From: nanoLox [mailto:nanoLox@HotPOP.com]
> Sent: Saturday, November 13, 2004 5:56 PM
> To: webappsec@securityfocus.com
> Subject: Hidden Form Field Tool
>
>     I am looking for a plugin to internet explorer which allows you to
> modify hidden form fields 'on the fly'. I previously had a plugin which
> would stay at the bottom of your browser and you could modify any form
> fields and then simply hit submit.
>
> Thanks