Hi, I strongly recommend all you to use OWASP ZAP instead of Webscarab for any client certificate or smartcard support, as new features and bugs are being fixed with newer versions.
Cheers, -- Raul Siles - www.raulsiles.com Founder & Senior Security Analyst Taddong (www.taddong.com) On Fri, Oct 7, 2011 at 12:01 PM, DC <yamato...@yahoo.com> wrote: > >> pUm escribió: >> > Hey, >> > >> > if you need a client certificate authentication via ssl (that's what >> > it is about, or? :P), than you can use webscarab and configure it as a >> > proxy. Point w3af to use webscarab proxy and configure webscarab to >> > use your certificate (Tools -> Certificates -> Add Key Store). >> > >> > I come to this point a few times and webscarab always worked fine for >> > me with my tools. >> > >> > cheers >> > >> > sven >> > > > > Hey hi, > > I am a newbie trying to dabble in web appl pentesting and is trying to use > w3af > in conjuction with webscarab for its smartcard support. Will like to ask how > do > I point the w3af to the webscarab? Through the proxy settings in w3af? Will > appreciate any help here. =) > > Thanks! > > > > > ------------------------------------------------------------------------------ > All of the data generated in your IT infrastructure is seriously valuable. > Why? It contains a definitive record of application performance, security > threats, fraudulent activity, and more. Splunk takes this data and makes > sense of it. IT sense. And common sense. > http://p.sf.net/sfu/splunk-d2dcopy2 > _______________________________________________ > W3af-users mailing list > W3af-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/w3af-users > ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2dcopy2 _______________________________________________ W3af-users mailing list W3af-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-users
