OWASP WebScarab

Note

Thanks to STFLightning for the translation (text originally written in French).

WebScarab

Description

WebScarab is a proxy used to intercept all incoming and outgoing requests, leaving the possibility to change the content on the fly. It's many plugins (analysis of WebServices, list of links, extensions, vulnerability analysis XSS / CRLF, analysis sessions, automate tasks by scripting, filtering extensions, commentary and analysis scripts in a page, fuzzing, distance editing, pattern matching based on regular expressions) make it a very interesting audit tool for securing Web applications.

Sommaire

1. Download 2. Installation 3. Settings 3.1. Automation 3.2. Browser settings 4. Menu 4.1. File 4.2. View 4.3. Tools 4.4. Help 4.5. Memory

5. Tabs 5.1. Summary 5.2. Messages 5.3. Proxy 5.3.1. Listeners 5.3.2. Manual Edit 5.3.3. Bean Shell 5.3.4. Miscellaneous 5.4. Manual Request

5.5. WebServices 5.6. Spider 5.7. Extensions 5.8. XSS/CRLF 5.9. SessionID Analysis 5.9.1. Collection 5.9.2. Analysis 5.9.3. Visualisation 5.10. Scripted

5.11. Fragments 5.12. Fuzzer 5.13. Compare 5.14. Search