OWASP/Training/OWASP Webslayer Project - Revision history

Sandra Paiva at 18:59, 12 January 2011

2011-01-12T18:59:33Z

Sandra Paiva at 18:56, 12 January 2011

2011-01-12T18:56:28Z

Sandra Paiva at 20:27, 22 December 2010

2010-12-22T20:27:13Z

Sandra Paiva at 20:22, 22 December 2010

2010-12-22T20:22:01Z

Sandra Paiva at 20:21, 22 December 2010

2010-12-22T20:21:06Z

Cmartorella at 00:04, 15 December 2010

2010-12-15T00:04:18Z

Sandra Paiva at 18:40, 7 December 2010

2010-12-07T18:40:51Z

Cmartorella at 15:40, 7 December 2010

2010-12-07T15:40:25Z

Cmartorella at 15:26, 7 December 2010

2010-12-07T15:26:20Z

Sandra Paiva: Created page with '{{Template:{{{1}}}OWASP Training Modules | Module_designation = OWASP Webslayer Project | M…'

2010-11-23T14:21:53Z

Created page with '{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Training Modules</noinclude> | Module_designation = OWASP Webslayer Project | M…'

New page

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Training Modules</noinclude>
| Module_designation = [[Category:OWASP Webslayer Project|OWASP Webslayer Project]]
| Module_Overview_Goal =
WebSlayer is a tool designed for bruteforcing Web Applications, it can be used for finding not linked resources (directories, servlets, scripts, etc), bruteforce GET and POST parameters, bruteforce Forms parameters (User/Password), Fuzzing, etc.

The tools have a payload generator and a easy and powerful results analyzer.

| Content =
 
Some features are:
* Encodings: 15 encodings supported
* All parameters attack: the tool will inject the payload in every parameter (Headers, Get, Post)
* Authentication: Webslayer supports Ntml and Basic authentication, also you can brute force the authentication
* Multiple payloads: you can use 2 paylods in different parts
* Proxy support (authentication supported)
* Live filters: You can change the filters as the attack is taking place
* Multiple threads: You can set how many threads to use in the attack
* Session import/export: Allows you to save the session and to continue working with the results
* Integrated web browser: a full fledge webkit browser is included to analyze the results
* Predefined dictionaries for predictable resource location, based on known servers (Thanks to Dark Raver, www.open-labs.org)
* Payload Generator (custom payload generator)

 
| Material =
[http://code.google.com/p/webslayer/downloads/list Webslayer]

}}

@@ Line 43: / Line 43: @@
 <br>
 *[http://www.vimeo.com/18082291 Video of the session presented at IBWAS'10 Training Day, 16th Dec 2010]
 &nbsp;
 }}

@@ Line 44: / Line 44: @@
 *[http://www.vimeo.com/18082291 Video of the session presented at IBWAS'10 Training Day, 16th Dec 2010]
 &nbsp;
 }}

@@ Line 42: / Line 42: @@
 <br>
-*[http://www.vimeo.com/18082291 OWASP Webslayer Project - Video IBWAS'10 session, 16th Dec 2010]
+*[http://www.vimeo.com/18082291 Video of the session presented at IBWAS'10 Training Day, 16th Dec 2010]
 &nbsp;
 }}

@@ Line 39: / Line 39: @@
 The training is a hands on course, so it is recommended to bring your own laptop (it´s possible to follow the training without a computer)
-The latest version of Webslayer can be downloaded from google code subversion:
+The latest version of Webslayer can be downloaded from google code subversion [http://code.google.com/p/webslayer/downloads/list here].
 <br>

← Older revision		Revision as of 20:21, 22 December 2010
Line 43:		Line 43:
	*[http://code.google.com/p/webslayer/downloads/list Webslayer]		*[http://code.google.com/p/webslayer/downloads/list Webslayer]

		+	<br>
		+	*[http://www.vimeo.com/18082291 OWASP Webslayer Project - Video IBWAS'10 session, 16th Dec 2010]
		+
	}}		}}

@@ Line 37: / Line 37: @@
 &nbsp;
 | Material =
-The training is a hands on course, so it is recommended to bring your own laptop.
+The training is a hands on course, so it is recommended to bring your own laptop (it´s possible to follow the training without a computer)
-The latest version of Webslayer can be downloaded from:
+The latest version of Webslayer can be downloaded from google code subversion:
 *[http://code.google.com/p/webslayer/downloads/list Webslayer]
 }}

@@ Line 25: / Line 25: @@
 The training will show how to use the tool and will cover the following topics:
--Interface overview
+*Interface overview
--Basic Payloads overview
+*Basic Payloads overview
--Basic directory discovery setup
+*Basic directory discovery setup
--Advance directory and file discovery
+*Advance directory and file discovery
--Login form brute force attack
+*Login form brute force attack
--Basic authentication attack
+*Basic authentication attack
--Custom payload generation
+*Custom payload generation
--Advanced uses
+*Advanced uses
@@ Line 41: / Line 41: @@
 The latest version of Webslayer can be downloaded from:
-[http://code.google.com/p/webslayer/downloads/list Webslayer]
+*[http://code.google.com/p/webslayer/downloads/list Webslayer]
 }}

@@ Line 1: / Line 1: @@
 {{Template:<includeonly>{{{1}}}</includeonly><noinclude>OWASP Training Modules</noinclude>
 | Module_designation = [[Category:OWASP Webslayer Project|OWASP Webslayer Project]]
-| Module_Overview_Goal =
+|  Module_Overview_Goal =
 WebSlayer is a tool designed for bruteforcing Web Applications, it can be used for finding not linked resources (directories, servlets, scripts, etc), bruteforce GET and POST parameters, bruteforce Forms parameters (User/Password), Fuzzing, etc.
 The tools have a payload generator and a easy and powerful results analyzer.
 &nbsp;
 Some features are:
 * Encodings: 15 encodings supported
 * All parameters attack: the tool will inject the payload in every parameter (Headers, Get, Post)
@@ Line 19: / Line 20: @@
 * Integrated web browser: a full fledge webkit browser is included to analyze the results
 * Predefined dictionaries for predictable resource location, based on known servers (Thanks to Dark Raver, www.open-labs.org)
 * Payload Generator (custom payload generator)
 | Content =
@@ Line 41: / Line 42: @@
 [http://code.google.com/p/webslayer/downloads/list Webslayer]
 }}