Using Acunetix Web Vulnerability Scanner as a Proxy Server
- Thursday, May 24, 2012, 2:00
- Articles, Threat Research
Among many advanced penetration testing tools provided, Acunetix Web Vulnerability Scanner (WVS) offers you the HTTP Sniffer tool. With the HTTP Sniffer you can capture, trap, analyze and even modify any HTTP traffic that the sniffer is listening to, e.g. port 8080. The Acunetix HTTP Sniffer is a combination of a proxy server and a sniffer. This gives the ability to the scanner to sniff any HTTP requests and responses between a web client and a web server. Therefore you have the opportunity to control and gain more information about the HTTP requests and responses, as well as their values and their behavior in real-time.
Acunetix WVS can also be configured to send traffic through a proxy server. As a result, you can use the Acunetix WVS as a proxy to monitor activity of another Acunetix WVS instance.
These two features (Acunetix WVS acting as a proxy and also forward traffic to a proxy) should never be configured to operate on the same port if their target interface is the same, because Acunetix WVS sends HTTP traffic through the configured proxy server, for example port 8080, and the HTTP Sniffer listens to the traffic from port 8080. This will result in receiving (continue reading...)