News for hackers. Stuff that matters.

A comment on Peach App Token Reuse Flaw.

Re:Peach App Token Reuse Flaw by heraclez on Monday January 18, 2016 @09:30PM (#10928535)
What tool does one use to inspect requests?
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by xuki on Monday January 18, 2016 @09:31PM (#10928540)
Charles proxy is pretty good https://www.charlesproxy.com
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by heraclez on Monday January 18, 2016 @09:42PM (#10928570)
Fantastic. Is this the defacto tool? Can this be done without a tool?
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by balls187 on Monday January 18, 2016 @10:20PM (#10928689)
On windows? Try fiddler: http://www.telerik.com/fiddler
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by mchahn on Tuesday January 19, 2016 @12:58AM (#10929091)
Fiddler works on all platforms. It is my proxy cap tool of choice.
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by balls187 on Tuesday January 19, 2016 @12:30PM (#10932226)
Oh, very cool. Last I used it (just after Telerik acquired them), it was Windows only.
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by jorge_leria on Tuesday January 19, 2016 @08:23AM (#10930518)
The best tool around is MITMproxy/MITMdump: Scriptable, free software and multiplatform. http://mitmproxy.org/
[ Parent | on HN ]
Re:Peach App Token Reuse Flaw by nstj on Tuesday January 19, 2016 @12:59AM (#10929094)
Burp is great too: https://portswigger.net/burp/
[ Parent | on HN ]