Health & poetry

So basically I Am sharing softwares tips and tricks tutorials and games for windows operating system .He is punctual in his work and loves to help other so guys this is it for further information and to contact me please visit Contact Us page sateted in the menu bar

Saturday, 15 June 2013

PAROS PROXY a java Application

03:45 By No comments


PAROS PROXY a java Application
Paros Proxy is a Java application (also included in Backtrack) that comes as a .jar file, which means it can run on any operating system, provided you have the latest java runtime (1.4x) installed. You can download Paros from:
http://www.parosproxy.org/

Moreover, Paros Proxy has a lot of features; it analysis HTTP message structure, renders HTML content in responses as it would appear in the browser, it has the ability to display and edit messaged in text and hexadecimal form. It allows the automatic updating of the HTTP Content-Length header following any manual editing of message contents.

We are not able to show you all the usage of this app but we will try to focus on one function:

To start using the tool Paros Proxy, one the proxy port has been set in your browser, simply double clicking the .jar file, and then start the browser and enter the URL that needs testing. For the purposes of this article we will be using http://demote.tesfire.net/ The site map, which is visible in Paros Proxy under the Sites tab, should then show the target URL you have browsed to. We know can get started with testing this website.
The first thing we need to know is the content of the website, at the moment we have a URL and we will need to know a lot more of the underlying application, before we can start running tests.

The “SPIDER” function can help us do this; there are two ways to do this thanks to Paros Proxy’s flexibility. Either, we can go to the URL under the “Sites” tab and right click, and chose “Spider” or do the same from the “Analyse” tab in the main window. What Paros’s spider function will do is request web pages, parsing these for links to other pages, and then request those pages. This will continue recursively until all of a site’s content has been discovered. Paros’s spider is able to look for forms bases navigation, JavaScript based navigation, multistage functions, authentication and sessions, parameter based identifiers, tokes, etc. The screenshots below display the results of spidering the website.

P.S. As we can see from our results, we have gained a lot of information, in the form of HTTP GET and POST requests, we can view both the requests and responses from the application by navigating on the right hand menu, by clicking the Request and Response method for each field, we can get an idea of what the application is made of.

0 comments:

Post a Comment