Installing OWASP’s WebScarab

owasp webscarab
Ripon Al Wasim picture Ripon Al Wasim · Nov 5, 2014 · Viewed 9.8k times · Source

I am following a book named "Web Security Testing Cookbook.pdf" (O'REILLY) by Paco Hope & Ben Walther. For installing standalone WebScarab I have found the following instruction:

To obtain the standalone version, browse to the WebScarab project at SourceForge:

http://sourceforge.net/project/showfiles.php?group_id=64424&package_id=61823

Once you’ve downloaded the standalone version, double-click the WebScarab .jar file.

After visiting http://sourceforge.net/project/showfiles.php?group_id=64424&package_id=61823 I found a file named "testing.sxw". As I didn't find any jar file what to do with testing.sxw?

Answer

Ripon Al Wasim picture Ripon Al Wasim · Nov 5, 2014

Prerequisite: jre1.4 or later

  1. Download "webscarab-selfcontained-20070504-1631.jar" from http://sourceforge.net/projects/owasp/files/WebScarab/20070504-1631/

  2. Run the jar file by double-click OR from command prompt by using the command:

    java -jar webscarab-selfcontained-20070504-1631.jar

WebScarab will be run successfully.

Related questions

PHP $_SERVER['HTTP_HOST'] vs. $_SERVER['SERVER_NAME'], am I understanding the man pages correctly?

I did a lot of searching and also read the PHP $_SERVER docs. Do I have this right regarding which to use for my PHP scripts for simple link definitions used throughout my site? $_SERVER['SERVER_NAME'] is based on …

Read More
What is "X-Content-Type-Options=nosniff"?

I am doing some penetration testing on my localhost with OWASP ZAP, and it keeps reporting this message: The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff' This check is specific to Internet Explorer 8 and Google Chrome. Ensure each page …

Read More
Why is it common to put CSRF prevention tokens in cookies?

I'm trying to understand the whole issue with CSRF and appropriate ways to prevent it. (Resources I've read, understand, and agree with: OWASP CSRF Prevention CHeat Sheet, Questions about CSRF.) As I understand it, the vulnerability around CSRF is introduced …

Read More