WebApp Sec mailing list archives

Re: New version of Exodus available


From: Tim Yohn <tyohn () alabanza com>
Date: Tue, 17 Jun 2003 13:34:57 -0400

All,

I'd like to point out one little thing that *everyone* that tries this product 
should be aware of.  It takes a directory as a command line argument, then 
procedes to delete (without prompting) anything in that directory, no matter 
what it is... Maybe a little prompting here would be nice, at least a warning 
that everything was going to be deleted instead of just going and removing 
everything...

The documentation on the website provided only states the following:

"Run exodus with a command like : 

java -jar exodus.jar directoryname

where directoryname is a directory that exodus should use to store the 
conversations seen. 
If no parameter is passed, exodus will not save any analysis at this point. 
The directory need not exist, but the name should end with a slash 
(appropriate for the platform)"

Tim. 

On Tuesday 17 June 2003 02:35 am, Dawes, Rogan (ZA - Johannesburg) wrote:
Hi folks,

Following on from the discussion about editing form fields, etc, I would
like to announce a new version of Exodus.

Exodus is a Java Swing application that provides a HTTP and HTTPS proxy
facility, allowing the operator to view and/or intercept and modify any and
all conversations between the browser and the server.

Exodus has significant functionality in terms of visualising the target
site's structure, automatically fetching unseen links, extracting comments,
forms and scripts from HTML responses, and submitting "known-bad" values to
forms to test error handling.

Exodus is available from
http://mysite.mweb.co.za/residents/rdawes/exodus.html

All feedback is welcome.

Rogan
--
"Using encryption on the Internet is the equivalent of arranging an
armored car to deliver credit card information from someone living
in a cardboard box to someone living on a park bench."
  - Gene Spafford
--
Deloitte & Touche Security Services Group
Tel: +27(11)806-6216     Fax: +27(11)806-5202     Cell: +27(82)784-9498


Current thread: