Hi, Thanks! Was fiddling with it last night and am impressed by the functions it provide for web pentest! :)
Sent from my iPhone On Oct 7, 2011, at 9:20 PM, Raul Siles <raul.si...@gmail.com> wrote: > Hi, > I strongly recommend all you to use OWASP ZAP instead of Webscarab for > any client certificate or smartcard support, as new features and bugs > are being fixed with newer versions. > > Cheers, > -- > Raul Siles - www.raulsiles.com > Founder & Senior Security Analyst > Taddong (www.taddong.com) > > > > > On Fri, Oct 7, 2011 at 12:01 PM, DC <yamato...@yahoo.com> wrote: >> >>> pUm escribió: >>>> Hey, >>>> >>>> if you need a client certificate authentication via ssl (that's what >>>> it is about, or? :P), than you can use webscarab and configure it as a >>>> proxy. Point w3af to use webscarab proxy and configure webscarab to >>>> use your certificate (Tools -> Certificates -> Add Key Store). >>>> >>>> I come to this point a few times and webscarab always worked fine for >>>> me with my tools. >>>> >>>> cheers >>>> >>>> sven >>>> >> >> >> Hey hi, >> >> I am a newbie trying to dabble in web appl pentesting and is trying to use >> w3af >> in conjuction with webscarab for its smartcard support. Will like to ask how >> do >> I point the w3af to the webscarab? Through the proxy settings in w3af? Will >> appreciate any help here. =) >> >> Thanks! >> >> >> >> >> ------------------------------------------------------------------------------ >> All of the data generated in your IT infrastructure is seriously valuable. >> Why? It contains a definitive record of application performance, security >> threats, fraudulent activity, and more. Splunk takes this data and makes >> sense of it. IT sense. And common sense. >> http://p.sf.net/sfu/splunk-d2dcopy2 >> _______________________________________________ >> W3af-users mailing list >> W3af-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/w3af-users >> ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2dcopy2 _______________________________________________ W3af-users mailing list W3af-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-users
