How about the idea of using a web browser as a h4cking tool?
Yes, with its library of security oriented extensions, Firefox is now evolving as an ethical h4cking tool. The framework that maps the security oriented collection of Firefox extensions is called FireCAT, which means Firefox Catalog of Auding exTensions.
FireCAT 1.3 is the latest version of the framework that was released on 27th November 2007 and include extensions from basic information gathering to advanced application security audits including cross-site scripting and SQL injection. In the current version of the framework, the number of these extensions has already exceeded sixty. The further details of the extensions in the framework are given in the paper 'Turning Firefox to an Ethical Hacking Platform'.
I have used some of these extensions and find them really useful during testing. But I would like to use more of these and see how powerful can a web browser become as a security testing tool?
Yes, with its library of security oriented extensions, Firefox is now evolving as an ethical h4cking tool. The framework that maps the security oriented collection of Firefox extensions is called FireCAT, which means Firefox Catalog of Auding exTensions.
FireCAT 1.3 is the latest version of the framework that was released on 27th November 2007 and include extensions from basic information gathering to advanced application security audits including cross-site scripting and SQL injection. In the current version of the framework, the number of these extensions has already exceeded sixty. The further details of the extensions in the framework are given in the paper 'Turning Firefox to an Ethical Hacking Platform'.
I have used some of these extensions and find them really useful during testing. But I would like to use more of these and see how powerful can a web browser become as a security testing tool?
Posts
1 comments:
Hello,
Most extensions enumerated in FireCAT 1.4 can be found in a package:
http://phrack.fr/tools/FireCAT-1.4.tar.gz
Post a Comment