Re: Firefox-based security testing tools

[Petko Petkov <ppetkov () gnucitizen org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Jeff Robertson wrote:

> What is your favorite Firefox extension for doing things like:
>
> - seeing all forms on a page, with methods and actions - seeing
> hidden form fields and their values - seeing the "value" attribute
> of the options in a select list - modifying all of the above on
> the fly - doing all of this WYSIWIG, in the main web page, with no
> need to look at or edit any HTTP requests
>
> I know there are things that do all this, but I've never gotten
> around to installing any of them. Recommendations?
>
> Jeff Robertson Manager of Web Application Security Digital Insight

Try this:
Live HTTP Headers - http://livehttpheaders.mozdev.org/
Web Developer - http://chrispederick.com/work/firefox/webdeveloper/
SwitchProxy Tool - http://mozmonkey.com/
User Agent Switcher -
http://chrispederick.com/work/firefox/useragentswitcher/
ShowIP -
Document Map - http://www-xray.ast.cam.ac.uk/~jgraham/
View formated source -
View Rendered Source - http://jennifermadden.com/

You can download all of them from:
https://addons.mozilla.org/extensions/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
 
iD8DBQFC/L3QFf/6vxAyUpgRAiRlAJ0cwOv31b63uDODGngOuMrGjTw5KwCgmQF+
GpRrHeXQmTtz0KSSTksBWtU=
=e548
-----END PGP SIGNATURE-----