Achilles is a proxy server, which acts as a man-in-themiddle
during an HTTP session. A typical HTTP proxy will relay packets
to and from a client browser and a Web server. Achilles will intercept
an HTTP session??™s data in either direction and give the user the ability
to alter the data before transmission. For example, during a normal
HTTP SSL connection, a typical proxy will relay the session between
the server and the client and allow the two end nodes to negotiate SSL.
Procedure: Launch WebGoat, configure the Web browser, launch Achilles,
and manipulate data in real time.
Double-click the webgoat.exe icon from the directory containing the
WebGoat application.
Wireless 575
WebGoat will initialize.
*Note: WebGoat, written in Java, is a full J2EE Web application designed to teach
Web application security. It can be installed on any platform with a Java
virtual machine. Some of the current lessons are as follows:
Cross-site script
SQL injection
Hidden form field management
Parameter manipulation
Weak session cookies
Fail open authentication
576 Practical Hacking Techniques and Countermeasures
Minimize the Tomcat screen. From the desktop, right-click the Internet
Explorer icon. The Internet Properties screen will be displayed.
Click on the Connections tab.
Wireless 577
Click the LAN Settings button.
Select Use a proxy server.
In the Address field enter 127.0.0.1.
In the Port field enter 5000.
Pages:
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199