post - How to use JMeter to test encoding in HTTP Request? Burp Suite? -


i have develop security testing framework make sure output in our application encoded.

i have many post & http requests

each request may have 1 or many parameters

what wanted jmeter:

i need test each parameter individualy changing value string. if have 2 requests, 5 parameters each have run 5 times. in addition have assertion point validate response data.

some ideas had record http requests.from jmx file create spreadsheet request details, parameter & value. go through list , modify each value string value canary123!@#$%^&(. verify response data not contain canary123!@#$%^&( , in fact came encoded. run test each data row.

also thought these might useful: counters, reg expression, user variables...

should use jmeter task? if so, how? should use burp suite?

i'd recommend using security tool specialises in sort of thing - check more encoding. burp good, free version doesnt include automated scanning.

i'd recommend looking @ owasp zap: https://www.owasp.org/index.php/owasp_zed_attack_proxy_project

i know lot of people/companies using zap automated part of ci: theres more info here: http://code.google.com/p/zaproxy/wiki/secregtests

simon (zap project lead)


Comments

Post a Comment

Popular posts from this blog

blackberry 10 - how to add multiple markers on the google map just by url? -

i have android application, want convert blackberry 10 , google map needed in app,but blackberry 10 not support googlemap , blackberry developer web site supply way replace it.the sample below: @override public void oncreate(bundle savedinstancestate) { super.oncreate(savedinstancestate); setcontentview(r.layout.main); webview webview = (webview) findviewbyid(r.id.mywebview); webview.getsettings().setjavascriptenabled(true); webview.loadurl("http://maps.google.com/?ll=36.97, -122&lci=bike&z=13&t=p"); } i cannot understand it,i not know how add multiple markers on googlemap via url? can me? this worked me map shown in webview.
Read more

php - guestbook returning database data to flash -

i've been struggling problem long , unable make work, hope can me it. first, know php files correct , mysql database works fine. in flash, able submit comment database comments not display. did many tests such making returned_database flash separately , worked fine - can see old comments. long combine submitting 1 , returning 1 together, flash doesn't show comments more. put lower version flash effects on frame thinking doesn't collaborate returning flash, submitting flash works fine. since pretty complex problem hard me copy actionscript code because on different frames in flash. if has ideas fixing maybe can send file you?
Read more

delphi - Dynamic file type icon -

i want register file type in windows , make program delphi draw icon of file according contents (something custom icon format). how can this? thanks nortd , user539484 comments, searched internet "shell icon handler delphi" , found sample here , , shell+ components has component this.
Read more