casper is a transparent proxy designed to be used during a web application penetration test during a manual target link discovery step.
Instead of just fireup a crawler, with casper you can have the link visited during a normal user session.
This is ideal to understand the logic sequence steps and what's happening behind the woods.
Running casper it is very easy:
$ casper
[2012-06-27 08:52:47] INFO WEBrick 1.3.1
[2012-06-27 08:52:47] INFO ruby 1.9.3 (2012-04-20) [x86_64-darwin11.4.0]
[2012-06-27 08:52:47] INFO Casper::Proxy#start: pid=24323 port=8080
Now you can configure your browser to use http://localhost:8080 as proxy server and watching all requests reaching the target.
If you don't want to be bothered by too much noise on screen, you can ask casper only to trace requests for the url you're interested to:
$ casper -T theapptotest.com
casper is configured to handle some signals and react accordingly:
FAQs
Unknown package
We found that casper-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Research
A malicious npm campaign is targeting Ethereum developers by impersonating Hardhat plugins and the Nomic Foundation, stealing sensitive data like private keys.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.