This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "JHijack"
From OWASP
D0ubl3 h3lix (talk | contribs) |
D0ubl3 h3lix (talk | contribs) |
||
Line 1: | Line 1: | ||
'''Description''' | '''Description''' | ||
− | A simple Java Fuzzer mainly used for numeric session hijacking and parameter enumeration. | + | A simple Java Fuzzer mainly used for numeric session hijacking and parameter enumeration. Developed by Yangon Ethical Hacker Group, http://yehg.net. |
Latest revision as of 12:56, 21 July 2014
Description
A simple Java Fuzzer mainly used for numeric session hijacking and parameter enumeration. Developed by Yangon Ethical Hacker Group, http://yehg.net.
Demonstrations
Session Hijacking http://yehg.net/lab/pr0js/files.php/webgoat_sessionman_sessionhijackingwithjhijack.zip
BlindSQLInjection http://yehg.net/lab/pr0js/files.php/webgoat_injectionflaws_blindsqlinjection.zip
Requirements
JRE/JDK 1.4 or above
Download
http://yehg.net/lab/pr0js/files.php/jhijackv0.1beta.zip http://downloads.sourceforge.net/project/jhijack/jhijack/latest/JHijack0.2-beta.zip