AppTesting Library

Info

A abstracted wrapper round the .Net HttpWebRequest/HttpWebResponse. It allows the very quick creation of HTTP(S) requests within .Net applications. For very quick creation, it is best used with HTTPCodeGen, which will auto- magically create the code required to exactly produce the request. It also wraps fuzzing, so you can quickly load fuzz vectors and use them with the HTTP Library. The Perl Diff functionality from Requester has been replicated as a PerlDiff object, that generates Perl diffs from either a single file or a complete directory of files.

Features

  • Configurable port
  • SSL support
  • Easily added headers
  • Easily added cookies
  • Automatic redirect following (has built-in infinate loop protection)
  • Supports HTTP 1.0 & HTTP 1.1
  • Response is split into status code, status desc & response text
  • Fuzzing capability
  • Perl Diff capability

Example C# Code (Request)

Http request = new Http();

request.Url = "/login.asp";
request.Verb = Http.HttpVerb.Post;
request.Port = 443;
request.Ssl = true;
request.Version = "1.1";

request.Headers.Add("Referer", "https://www.secure.co.uk");
request.Headers.Add("Content-Type", "application/x-www-form-urlencoded");
request.Headers.Add("User-Agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)");
request.Headers.Add("Host", "www.secure.co.uk");

request.Cookies.Add("SessionId", "114407385675406894228882340403");

request.Data = "username=woany&password=12345678";

if (request.Send() == true)
{

}

Example C# Code (Fuzz)

Fuzz fuzz = new Fuzz("\Fuzzer.xml");

for (int index = 0; index < fuzz.Count; index++)
{
    // ((FuzzItem)fuzz.Item(index)).Value
    // ((FuzzItem)fuzz.Item(index)).Type

    // or

    // FuzzItem fuzzItem = fuzz.Item(index);
    // fuzzItem.Type
    // fuzzItem.Value
}

Example C# Code (Diff)

PerlDiff diff = new PerlDiff();
string output = diff.Generate("successful_login.html", "failed_login.html");

or
PerlDiff diff = new PerlDiff();
string output = diff.Generate("successful_login.html", "C:\\Output\\Fuzz");

Requirements

  • Windows 2000, Windows XP, Windows 2003 Server (Might work on others?)
  • Microsoft .NET Framework v1.1

Options:

Size

Colors