[Owasp-o2-platform] [Owasp-leaders] Testing Silverlight

Tony UV tonyuv at owasp.org
Wed Mar 9 23:27:06 EST 2011


No, completely blackbox, so no server side source.  Is that a deal-breaker
for testing with O2?

 

Tony UcedaVelez, CISM, CISA, GSEC

Atlanta Chapter President

Membership Committee Global Board Member

OWASP Atlanta

http://www.owasp.org/index.php/Atlanta_Georgia

Twitter: @versprite

 

From: owasp-leaders-bounces at lists.owasp.org
[mailto:owasp-leaders-bounces at lists.owasp.org] On Behalf Of dinis cruz
Sent: Wednesday, March 09, 2011 11:23 PM
To: owasp-leaders at lists.owasp.org
Cc: owasp-o2-platform at lists.owasp.org
Subject: Re: [Owasp-leaders] Testing Silverlight

 

Hi Tony, I have done the web services part several times using the O2
Platform.

 

If you have a test/demo site available , I can show you how

 

Do you also have access to the server-side source code?

Dinis Cruz


On 10 Mar 2011, at 03:19, Tony UV <tonyuv at owasp.org> wrote:

Hey all,

 

Skyped Manico this question today and he recommended I share with the leader
list, so here it goes.

 

Has anyone had any success in testing Silverlight based front-ends that talk
to a web service? 

 

I've used.NET Reflector, Zed, and Burp with good success in pulling back
multiple wsdl files, code assemblies that Silverlight interfaces with
(contained within .xap files), and other good nuggets, but seeing what
others have used as part of their own testing regiment?

 

Has any ever used .NET's svcutil.exe from the Windows SDK to create a rogue
request to a web service or written a tool to do so in conjunction with
params that some of the assemblies may be expecting?  

 

Tony UcedaVelez, CISM, CISA, GSEC

Atlanta Chapter President

Membership Committee Global Board Member

OWASP Atlanta

http://www.owasp.org/index.php/Atlanta_Georgia

Twitter: @versprite

 

_______________________________________________
OWASP-Leaders mailing list
OWASP-Leaders at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-leaders

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-o2-platform/attachments/20110309/85b78c40/attachment.html 


More information about the Owasp-o2-platform mailing list