CAT - Web Application Security Testing Tool
Thursday, December 27, 2012
0
comments
Web application security tools has a great importance now. We all know that hackers are now always trying to hack websites. So we can not take any risk. To make web application penetration testing work easy, there is nice tool available. It is called CAT.
CAT gives us an easy to start penetration testing of a website which is meant to be a complex task. It removes repetitive elements of the testing and makes everything fast.
Key Components
CAT offers features that enable a wide variety of testing methods to be conducted:
- Request Repeater – Used for repeating a single request
- Proxy – Classic Inline proxy
- Fuzzer – Allows for batch of tests to be sent to a server for brute forcing, parameter fuzzing, forced browsing etc.
- Log – View a list of requests to sort, search repeat etc. Allows for a sequence of requests to be repeated and modified.
- Authentication Checker – Two synchronised proxies which can be used to check authentication and authorisation controls.
- SSL Checker – Request a specific page with various SSL ciphers and versions.
- Notepad – A text/RTF editor which can be used as a scratch pad for conversions etc.
- Web Browser – An integrated web browser with proxy pre-configured based on the Internet Explorer's rendering engine.
- Addons – Freely accessible API/SDK to extend CAT with additional functionality.
These are the main things why we should use this tool.
- CAT uses Internet Explorer’s rendering engine for accurate HTML representation
- It supports many different types of text conversions including: URL, Base64, Hex, Unicode, HTML/XML, SQL and JavaScript no quotes
- It offers integrated SQL Injection and XSS Detection
- Synchronised Proxies for Authentication and Authorisation checking
- Tabbed Interface allows for multiple tools at once e.g. multiple repeaters & different logs
- Faster performance due to HTTP connection caching
- Greater flexibility for importing/exporting logs and saving projects
- SSL Version and Cipher checker using OpenSSL
- The ability to repeat and modify a sequence of requests (particularly useful in SSO testing)
- It’s free!
Categories:
CAT,
Web Scanners
0 comments:
Post a Comment