Forum Discussion

chicks's avatar
chicks
Regular Contributor
13 years ago

automate security testing - Fiddler ? - tamper data ? - ????

I've been asked to automate some of our security tesing.    I have worked briefly with the Firefox extension tamper data, and have now discovered it does not support ajax requests. 

At this point, I'm thinking that rather than try to find a tool that will let me use a UI to manipulate data fields in my HTTP requests I just create and send the HTTP requests directly.    I  don't know if this is even feasible, but it seems very straight forward. 



I would greatly appreciate any comments or suggestions. 

2 Replies

  • chicks's avatar
    chicks
    Regular Contributor
    13 years ago
    Thanks Nick !     I noticed that I never responded on that thread.   Yes, I have had the WS requests working for quite  a while now thanks to your advice.



    And had planned on a similar approach for this.    Have you done this yourself for security testing?  I saw another thread where you mentioned Fiddler2  for this kind of thing.



    Thanks as always!