Besuchen Sie unsere Research
We build genuine partnerships with our clients
User Guide
Context App Tool (CAT) is an application to facilitate manual web application penetration testing. Conceptually it is similar to other proxies available both commercially and open source. CAT provides a richer feature set and greater performance, combined with a more intuitive user interface to aid a professional manual penetration tester. CAT is written in .NET and uses a native web browser controls to provide a richer interaction between the tester and the application. CAT also has support for MONO for use on Linux and OSX.
CAT provides the ability to test a web application for all types of vulnerabilities from SQL injection to reverse proxy bypass. It allows for traffic between a web browser and a web server to be intercepted and altered. Requests can then be repeated within CAT allowing for all aspects of the request to be altered. Requests can be fuzzed using a range of different fuzzing algorithms including brute forcing, injection attacks and scripted attacks; it also provides a facility to fuzz forms with CSRF tokens. Authorisation within an application can easily be checked using two synchronised web sessions from one user type to another. CAT also allows for Silverlight’s binary WCF protocol to be tested. Data can be analyzed in many different ways, including difference detection and search. Overall CAT has a rich range of functionality that has been developed over four years to provide a professional tool for securing web applications.
How we can help
We are an independent security consultancy, specialising in both technical security and information assurance services.
CAT
Our new flagship
tool CAT is perfect
for identifying application
security vulnerabilities.
