From the course: Ethical Hacking: Hacking Web Servers and Web Applications

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Introducing WebScarab

Introducing WebScarab

From the course: Ethical Hacking: Hacking Web Servers and Web Applications

Start my 1-month free trial

Introducing WebScarab

- [Narrator] WebScarab is a Java based web application and web server assessment tool. It can operate as a web spider, crawling a website or a web proxy tool, intercepting http and https request and response messages. And providing the ability to make changes to them. It's a little bit dated and has been superseded by Zed Attack Proxy. And there's also a next generation tool available, WebScarab NG. Nevertheless, the original WebScarab is still an active Kali tool which provides a comprehensive set of features, so it's worth taking a look at it. WebScarab is in the applications, web application analysis menu. I'll select it. Before starting any work with WebScarab, we'll need to set up Iceweasel to proxy through WebScarab. We can do that through the options at the top right, preferences, advanced, network settings, and then change the selection to manual proxy on 127.0.0.1 through Port 8008. Okay, now any web…

Contents