WebScarab
| Company type | Open source software |
|---|---|
| Industry | Computer security, Software testing |
| Founder | The Open Web Application Security Project |
| Defunct | April 2024 |
| Fate | Archived repository; development ceased |
| Successor | OWASP Zed Attack Proxy |
Area served | Cross-platform |
| Products | Web security testing utility |
| Website | www |
WebScarab is a web security testing utility created by The Open Web Application Security Project. It operates as a proxy server, intercepting and enabling alteration of HTTP and HTTPS requests and responses, while also offering traffic capture for detailed examination.
Active development diminished in 2013, with the project's repository being archived in April 2024. The official site now points users toward OWASP's Zed Attack Proxy as the recommended alternative.
Overview
Developed in Java, WebScarab is an open source application designed for use across multiple platforms. Its architecture is modular, relying heavily on plugins to provide most of its features.
Features
Prominent plugin capabilities include:
- Proxy server with interception
- Running Java commands through BeanShell
- Simulating network latency
- Automated web crawling
- Parameter fuzzing for requests
- Analysis of Cross-site scripting vulnerabilities