.

What browser to use for web testing?

<<

millwalll

Post Fri Oct 14, 2011 8:20 am

What browser to use for web testing?

I just wanted to find out what browser people used for web testing what plug ins do they find useful?

At the moment I use frefox and so far use tampa data,foxy proxy,firebug and live headers
I also have chrome install what I used for searching the web if I am using firefox to test a site.

What are you using ? any plug ins you can recommended ?
<<

tturner

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Thu Jun 26, 2008 4:50 pm

Post Fri Oct 14, 2011 9:45 am

Re: What browser to use for web testing?

Firefox 3.x

As for plugins, it's a rather long list:

Flashgot
Fiddler
Firebug
Tamper data
Passive recon
Fireforce
FoxyProxy
Hackbar
Modify headers
User Agent switcher
Greasemonkey
DOM inspector
Add n edit cookies
Web developer
Wappalyzer

and I'm sure a bunch more that I don't remember off the top of my head.

I also use IE (multiple versions), Links, Chrome and Safari at times as well but FF is my primary.
Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, GSSP-JAVA, OPSE, CSWAE, CSTP, VCP

WIP: Vendor WAF stuff

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org
<<

rattis

User avatar

Hero Member
Hero Member

Posts: 1172

Joined: Mon Jul 27, 2009 1:25 pm

Post Fri Oct 14, 2011 10:12 am

Re: What browser to use for web testing?

While I'm not doing much web-app testing (job requirements changed at work), I still have to do troubleshooting with load balancers (network engineering side). Currently I use:

Firebug
Firecookie
FoxyProxy
Liveheaders
ShowIP

I think my primary home system actually has more installed.
OSWP, Sec+
<<

millwalll

Post Sat Oct 15, 2011 12:15 pm

Re: What browser to use for web testing?

Cool I will have to look into some them plugins
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Sat Oct 15, 2011 2:30 pm

Re: What browser to use for web testing?

I use Chrome, day-to-day, but Firefox for almost all pentests, simply for all of the great plugins.  Just hard to beat, when you have everything in one place.

In addition to those plugins, which chrisj and tturner mentioned, there are so many more (Netcraft, MANY SQL ones, etc - to give a small sampling)
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

p0et

User avatar

Full Member
Full Member

Posts: 197

Joined: Thu Nov 02, 2006 4:38 pm

Location: Victoria, Canada

Post Sat Oct 15, 2011 11:39 pm

Re: What browser to use for web testing?

I just ran into "Firecat" the other day for Firefox.  It looks like it's a collection of security auditing plugins.
GCIH, Security+, Network+, A+, MCP, DCSE
<<

millwalll

Post Mon Oct 17, 2011 3:43 am

Re: What browser to use for web testing?

Thanks will defo have play with some these as my new job wants me to test web apps and I am used to doing more network stuff so taking bit time to get used to what tools to use and stuff.
<<

magnologan

User avatar

Newbie
Newbie

Posts: 4

Joined: Wed Oct 26, 2011 12:26 pm

Post Wed Oct 26, 2011 12:43 pm

Re: What browser to use for web testing?

The best browser for web testing is Mantra. A Firefox based browser with all the add-ons for security testing and auditing. Download here: http://getmantra.com/

Try OWASP tools at www.owasp.org. OWASP has a Testing Guide for you to test your web applications.
<<

tturner

User avatar

Sr. Member
Sr. Member

Posts: 435

Joined: Thu Jun 26, 2008 4:50 pm

Post Wed Oct 26, 2011 1:14 pm

Re: What browser to use for web testing?

I really like Mantra. Good call! Btw for folks having issues getting it to work with Firefox installed, follow the instructions at http://getmantra.com/forums/Thread-runn ... x-together
Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, GSSP-JAVA, OPSE, CSWAE, CSTP, VCP

WIP: Vendor WAF stuff

http://sentinel24.com/blog @tonylturner http://bsidesorlando.org
<<

MaXe

User avatar

Hero Member
Hero Member

Posts: 671

Joined: Tue Aug 17, 2010 9:49 am

Post Thu Oct 27, 2011 3:25 pm

Re: What browser to use for web testing?

FireFox with:
Tamper Data
Live HTTP Headers
Firebug (must have)
Cookies Manager

And a tool outside the browser:
- Burp Suite Free (intercepting proxy with nice spider features)

And a scripting language like Python. That's pretty much all you need from basic to more advanced exploitation.

I recommend you get some sort of character encoding tool too, for example I use this a lot: http://intern0t.net/xssor/
I'm an InterN0T'er

Return to Web Applications

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software