Today i found a quite cool extension for the firefox Browser: Tamper Data. This nice tool enables the user to view and change every HTTP Request, before it is send to the server. So it’s possible to spoof nearly every kind of header information.
Who’s willing to try can do this here with the credentials admin:ngsec. The login works if the referrer is set to ‘http://www.ngsec.com’
Bookmark to:
Welcome to the Security Blogsphere.
Jim C am 2006-11-29