28 January 2010 | 7,647 views

Groundspeed 1.1 – Web Application Security Add-on For Firefox

Groundspeed is an open-source Firefox extension for web application security testers presented at the OWASP AppSec DC 2009. It allows you to manipulate the web application’s user interface to eliminate annoying limitations and client-side controls that interfere with the web application penetration test.

What can I do with Groundspeed?

Groundspeed allows you to modify the forms and form elements loaded in the page. Some practical uses include:

  • Changing the types of form fields, for example you can change hidden fields into text fields so you can easily edit their contents.
  • Quickly removing size and length limitations on text fields so you have more space to type your attack strings.
  • Changing form target so the form submits in another tab.
  • Removing or editing the JavaScript event handlers to bypass client side validation.

You can install Groundspeed here:

https://addons.mozilla.org/en-US/firefox/addon/46698/

Or read more here.

Post to Twitter Post to Delicious Post to Digg Post to Facebook Post to StumbleUpon

  



Recent in Hacking Tools:
- FuzzDiff – Tool For Fuzzing and Crash Analysis
- thc-ipv6 Toolkit – Attacking the IPV6 Protocol
- Metasploit Framework 3.4.1 Released – 16 New Exploits, 22 Modules & 11 Meterpreter Scripts

Related Posts:
- Selenium – JavaScript Web Application Security Testing Tool
- FireCAT 1.5 Released – Firefox Catalog of Auditing Extensions
- Firefox Patches 8 Security Vulnerabilities with 2.0.0.1

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,216,864 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 601,839 views
- Wep0ff – Wireless WEP Key Cracker Tool - 342,826 views


4 Responses to “Groundspeed 1.1 – Web Application Security Add-on For Firefox”

  1. Andy 28 January 2010 at 11:46 am Permalink

    Just an FYI – the xpi link on mozilla addons doesn’t work.

    It seems to be around 600bytes in size.

  2. Darknet 28 January 2010 at 12:50 pm Permalink

    Just installed it here, works fine 98.1kb on my end.

  3. dblackshell 29 January 2010 at 7:17 am Permalink

    Or you could check my collection of Firefox pen-testing add-ons https://addons.mozilla.org/en-US/firefox/collection/wapt

  4. Andy 5 February 2010 at 4:40 pm Permalink

    Thanks for the response, I managed to get a slightly older version from addons that worked without problems. It may have just been a browser hiccup or something.

    Oh and I hadn’t seen that collection before, that’s great. Always on the lookout for new tools/extensions. Bookmarked. :)