1
Suppose a website is loaded completely. Website is in HTTP version and has contact form. When we submit form, ajax is used to send the data. Page is neither refreshed. I want to track what data the website send from my browser to its server.
user1797902
Posted 2013-11-10T08:35:48.667
Reputation: 13
0
There are two applications that immediately spring to mind that will enable you to monitor and also change http(s) traffic that travels through your browser.
In simple terms, they allow you to set up what is effectively a "man in the middle" style attack by way of a local proxy.
To quote the Burp Suite home page "An intercepting Proxy, which lets you inspect and modify traffic between your browser and the target application."
Both applications are quite mature and have great documentation on their respective sites.
There is also a really good playlist on Youtube by the developer of Fiddler2 that is well worth the time in checking out. The user name is Teleriklnc and the playlist is "Fiddler Web Debugging Proxy". (sorry no links, have reached my quota)
Further general reading on the topic - at the OWASP website. Hope this helps.
bob
Posted 2013-11-10T08:35:48.667
Reputation: 171
Awesome Man :) Loved your reply! – user1797902 – 2013-11-11T02:39:10.860
You are most welcome, you might also be interested in looking at Samurai Web Testing Framework - is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing your website for vulnerabilities. Enjoy!
– bob – 2013-11-11T02:46:33.470