CAT - New Web Application Testing Tool Released

CAT (Context App Tool) is an application to facilitate manual web application penetration testing. It was designed to cope with a more demanding level of application testing, taking away some of the more repetitive nature of testing and allowing the tester to focus their time instead on the individual application, enabling them to conduct a much more thorough test. Conceptually it is similar to other proxies available both commercially and open source. CAT provides a richer feature set and greater performance, combined with a more intuitive user interface to aid a professional manual penetration tester.

There are a number of differences between CAT and currently available web proxies. Some key differences are:

• - Uses Internet Explorer's rendering engine for accurate HTML representation
• - Supports many different types of text conversations including: URL, Base64, Hex, Unicode, HTML/XML, SQL and JavaScript no Quotes
• - Integrated SQL Injection and XSS Detection
• - Synchronised Proxies for Authentication and Authorisation checking
• - Faster due to HTTP connection caching
• - SSL Version and Cipher checker using OpenSSL
• - Greater flexibility for importing/exporting logs and saving projects
• - Tabbed Interface allowing for multiple tools at once e.g. multiple repeaters and different logs
• - The ability to repeat and modify a sequence of requests (particular useful in SSO testing)
• - Free!

Download