WebApp Sec mailing list archives
Re: New version of Exodus available
From: Tim Yohn <tyohn () alabanza com>
Date: Tue, 17 Jun 2003 13:34:57 -0400
All, I'd like to point out one little thing that *everyone* that tries this product should be aware of. It takes a directory as a command line argument, then procedes to delete (without prompting) anything in that directory, no matter what it is... Maybe a little prompting here would be nice, at least a warning that everything was going to be deleted instead of just going and removing everything... The documentation on the website provided only states the following: "Run exodus with a command like : java -jar exodus.jar directoryname where directoryname is a directory that exodus should use to store the conversations seen. If no parameter is passed, exodus will not save any analysis at this point. The directory need not exist, but the name should end with a slash (appropriate for the platform)" Tim. On Tuesday 17 June 2003 02:35 am, Dawes, Rogan (ZA - Johannesburg) wrote:
Hi folks, Following on from the discussion about editing form fields, etc, I would like to announce a new version of Exodus. Exodus is a Java Swing application that provides a HTTP and HTTPS proxy facility, allowing the operator to view and/or intercept and modify any and all conversations between the browser and the server. Exodus has significant functionality in terms of visualising the target site's structure, automatically fetching unseen links, extracting comments, forms and scripts from HTML responses, and submitting "known-bad" values to forms to test error handling. Exodus is available from http://mysite.mweb.co.za/residents/rdawes/exodus.html All feedback is welcome. Rogan -- "Using encryption on the Internet is the equivalent of arranging an armored car to deliver credit card information from someone living in a cardboard box to someone living on a park bench." - Gene Spafford -- Deloitte & Touche Security Services Group Tel: +27(11)806-6216 Fax: +27(11)806-5202 Cell: +27(82)784-9498
Current thread:
- New version of Exodus available Dawes, Rogan (ZA - Johannesburg) (Jun 17)
- Re: New version of Exodus available Tim Yohn (Jun 17)
- <Possible follow-ups>
- RE: New version of Exodus available Dawes, Rogan (ZA - Johannesburg) (Jun 18)
