pen-test
[Top] [All Lists]

Re: Pentesting Openmail Web login

To: pagvac <unknown.pentester@gmail.com>
Subject: Re: Pentesting Openmail Web login
From: "rajat swarup" <rajats@gmail.com>
Date: Thu, 31 May 2007 00:39:34 -0400
Cc: s-williams@nyc.rr.com, listbounce@securityfocus.com, "pen-test@securityfocus.com" <pen-test@securityfocus.com>
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=NhuoGp3dw+La+6yACrcByP1i25XyBVeOXEWtvXzvUe+4a2AV02lxWFdr6ypQ26mrZmcMluj8uIDbj7aWWVfq4f8OkpS9NFaxPDtgPH7pIKCs2ttKb2kIM+DqZRqS9p6aOPqC3fiF47tS5YhGhbdgCV68JpdsExUejBv6ANBHT2U=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ggQgISYWK3fPOU14OeK7eTaVPra7QVBDzaQHwb5znH8rQP3P+B9zwxqN5UYwx1PqNxIHKvC3P3q3oaqkjexGFHJlFevYX2dEWAwuQGTD/SX+FF9azIMl9HNixwQA2gcllV02gj37VeDix58d0nMzHd9H0gMwWnbDPWDILP/H/ms=
In-reply-to: <b7a807650705291025x4701e6d9m2b667a16d7bbf2e9@mail.gmail.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <679373278-1179969881-cardhu_blackberry.rim.net-1262565111-@bxe047-cell01.bisx.prod.on.blackberry> <b7a807650705291025x4701e6d9m2b667a16d7bbf2e9@mail.gmail.com>
Resent-date: Thu, 31 May 2007 00:16:52 -0600 (MDT)
Resent-from: pen-test-return-1078484292@securityfocus.com
Resent-message-id: <20070531061652.5E0D8237022@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
On 5/29/07, pagvac <unknown.pentester@gmail.com> wrote:
nothing can beat bash + curl when it comes to bfing webapps

I couldn't agree more with pagvac!  Install cygwin on windows and you
can use those scripts on windows as well.  Also, burp intruder can do
a lot of stuff but it's a commercial tool.  The free version of that
can also be used but it introduces a delay in the requests.

HTH,
--
Rajat Swarup

http://rajatswarup.blogspot.com/

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>