Using Watcher to make pen testing more efficient

greggles — Thu, 12 Nov 2009 19:47:11 +0000

The Watcher session was basically a sales pitch and demo for the Watcher tool, though it's a free tool so "sales pitch" is not exactly right. Watcher is an open source tool that sites inside of Fiddler which is a web proxy useful for debugging web applications.

The application is a windows only tool.

So, I left the room and went to see Social Media Zombies next door. I'm sure Fiddler and Watcher is pretty awesome, but Grendel is actually cross platform so it's much more interesting to me.

Basically they create a bot and control it with twitter. Turns out, this was actually used for evil after it was initially launched. Further, it's possible to use Facebook, Wave, MySpace, etc. to run XSS and get access to your private data. Overall, quite an interesting presentation with more good resources at Digi Ninja and Social Media Security.

Cracking Drupal - social media

Using Watcher to make pen testing more efficient