Web Application Hacking tools

Proxy / spider tool suites

• Burp Suite
• Paros
• WebScarab

Browser extensions (Firefox)

• LiveHTTPHeaders
• Tamper Data
• FoxyProxy
• SwitchProxy
• AddNEditCookies
• CookieWatcher

Browser extensions (Internet Explorer)

• TamperIE
• HttpWatch
• IEWatch

Java

• Jad
• Jode
• JSwat

ActiveX

• COMRaider
• Process Monitor
• .NET Reflector

Flash

• Flasm
• Flare

Vulnerability scanners

• AppScan
• WebInspect

Miscellaneous

• Stompy
• Absinthe
• Source Insight
• HTTPrint
• THCSSLCheck