[Owasp-o2-platform] [Owasp-leaders] Testing Silverlight

dinis cruz dinis.cruz at owasp.org
Wed Mar 9 23:23:03 EST 2011


Hi Tony, I have done the web services part several times using the O2
Platform.

If you have a test/demo site available , I can show you how

Do you also have access to the server-side source code?

Dinis Cruz

On 10 Mar 2011, at 03:19, Tony UV <tonyuv at owasp.org> wrote:

Hey all,



Skyped Manico this question today and he recommended I share with the leader
list, so here it goes.



Has anyone had any success in testing Silverlight based front-ends that talk
to a web service?



I’ve used.NET Reflector, Zed, and Burp with good success in pulling back
multiple wsdl files, code assemblies that Silverlight interfaces with
(contained within .xap files), and other good nuggets, but seeing what
others have used as part of their own testing regiment?



Has any ever used .NET’s svcutil.exe from the Windows SDK to create a rogue
request to a web service or written a tool to do so in conjunction with
params that some of the assemblies may be expecting?



Tony UcedaVelez, CISM, CISA, GSEC

*Atlanta Chapter President*

*Membership Committee Global Board Member*

*OWASP Atlanta*

http://www.owasp.org/index.php/Atlanta_Georgia

Twitter: *@versprite*



_______________________________________________
OWASP-Leaders mailing list
OWASP-Leaders at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-leaders
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-o2-platform/attachments/20110310/27048af7/attachment.html 


More information about the Owasp-o2-platform mailing list