Difference between revisions of "OWASP Hatkit Datafiddler Project"

Revision as of 18:27, 10 April 2011

Main

The Hatkit Datafiddler is a tool for performing analysis of captured http traffic. It currently consists of two main views, one table-based and one tree-based. These views allow the user to study different aspects of the http traffic, with very high degree of configurability. The tool is also meant to be a framework which can utilize existing tools analyze traffic.

It is written in Python with a Qt-based UI and uses a MongoDB database. It has a sister-project, which is the Hatkit Proxy

Getting started

First of all, visit BitBucket download page to check which is the latest release. Then get it:

$ wget https://bitbucket.org/holiman/hatkit-datafiddler/downloads/hatkit_datafiddler-0.5.0.zip
$ unzip hatkit_datafiddler-0.5.0.zip 
$ cd hatkit_datafiddler-0.5.0/
$ python datafiddler.py

Datafiddler will tell you about any missing dependencies with something like this:

Unfortunately, you have the following missing dependencies:
 * python-qt4 : Python bindings for Qt4
 * pymongo : Python drivers for MongoDB

Fetch them via your favourite package manager (on *nix systems. Windows is currently not endorsed). Naturally, you need a MongoDB also. MongoDB is available either from the package repositories or from MongoDB download section.

If all goes well, you should be met by this screen, where you can choose which session to use. Sessions are really just databases, but Datafiddler only lists the databases in your MongoDB which contain a collection called conversations.

Project About

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Hatkit Datafiddler Project (home page) Purpose: The Datafiddler is a tool for performing advanced analysis of http traffic. It currently consists of two main views, one table-based and one tree-based. These views allow the user to study different aspects of the http traffic, with very high degree of configurability. The tool is also meant to be a framework which can utilize existing tools to analyze traffic post mortem (or real-time). Built in Python/Qt + MongoDB. License: GNU General Public License v3 who is working on this project? Project Leader(s): Martin Holst Swende @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: View Mailing list: Mailing List Archives Project Roadmap: View Main links: Project at BitBucket Issue tracker OWASP Hatkit Proxy Project Key Contacts Contact Martin Holst Swende @ to contribute to this project Contact Martin Holst Swende @ to review or sponsor this project

current release Hatkit Fiddler v 0.5.0 - April 9 2011 - (download) Release description: This tool allows you to analyze data which has been catpured into a MongoDB. You can view the data in table-mode (with dynamically evaluated column-definitions which can reach into html, transform values etc), aggregate-mode (performs advanced data aggregation, showing different characteristics on the data depeneding on how you define (or use the pre-defined) javascript aggregators, which are sent right into MongoDB). It also has a third-party-app replay functionality, to let w3af or ratproxy do their thing and analyze the data for you. Requirements: Python, Python-qt bindings, Qt4, MongoDB, Python Mongodb drivers. Rating: Not Reviewed - Assessment Details last reviewed release Not Yet Reviewed other releases Hatkit Fiddler v 0.5.0