[PEN-TEST] Browser Automation

[Mark Curphey <mark () CURPHEY COM>]

Thanks to all who contributed to the last thread I started on Secure HTTP
session state management.  Good discussion but agree its offline for this
list !

Its has however given me a few ideas on a few tools I want or am going to
have to write. I want to be able to do two things automagically.

1. Is to follow a web site transaction automagically from sign in to sign
out, by specifying a number of interactions like usernames and passwords and
form filed inputs etc. Now I know Elza does this and it is awesome (kudos to
Philip Stoev (www.stoev.org) ) but I am lazy and my Perl is not great so the
learning curve steep.

Are there any other tools that can do this ?

2. Second I want to watch a set of cookies; i.e. all the cookies that are
produced from the same bakers oven. I want to be able to watch what changes
automagically during a transaction to look at hijacking and session
management; i.e. compare a bakers oven over time.

Are there any other tools that can do this ?