SPIKE Proxy 1.4.8 review

Spike Proxy is an open source HTTP proxy for finding security flaws in web sites. SPIKE Proxy is part of the Spike Application Tes

License: Freeware File size: 616K Developer: Dave Aitel

0

Spike Proxy is an open source HTTP proxy for finding security flaws in web sites.

SPIKE Proxy is part of the Spike Application Testing Suite and supports automated SQL injection detection, web site crawling, login form brute forcing, overflow detection, and directory traversal detection.

To Use:

python spkproxy.py [ optional port argument, 8080 is default ]
Then set up your browser to use that port for both HTTP and
HTTPS proxies.

Then watch the traffic go!

Requirements:
Python

What's New in This Release:
Major UI improvements, added a normalizer so URLs don't push behind the spikeProxyUI directory. Cache is much nicer - disregards images. Fixed that annoying ../../ bug.
read_query.py added. Useful for printing out saved requests from the command line without loading the entire UI.
Various core engine fixes