3

I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.

Specifically, I'm looking for a tool that can cope with sending requests to binary RIA service endpoints.

Do such tools exist?

AviD
  • 72,138
  • 22
  • 136
  • 218
Matthew Murdoch
  • 183
  • 1
  • 6
  • Frankly I'm interested in any automated penetration testing tools (more specifically network, but I'm happy to see any perspective). I religiously warn against automation, but I would love to be able to schedule a scan and see trending. – Ormis May 03 '11 at 19:39
  • P.S. Core INSIGHT is something to look at, but not an answer to this question. http://www.coresecurity.com/content/CORE-INSIGHT-Enterprise – Ormis May 03 '11 at 19:42
  • Product recommendations are discouraged here. Can you re-cast your question to ask about the features of a suitable tool, or something like that? – Bob Brown Feb 20 '15 at 14:47

1 Answers1

1

Short Answer: No (though with the speed of the web, by the time you read this things might have changed...)

Long Answer: There are several that may be helpful, but I haven't tried them

David B Heise
  • 126
  • 3
  • +1 and accepting this answer for now as Burp Suite + WCF binary SOAP plugin looks like it supports my need (although I also have not yet tried it...). – Matthew Murdoch May 13 '11 at 10:21