Groundspeed 1.1 – Web Application Security Add-on For Firefox


Groundspeed is an open-source Firefox extension for web application security testers presented at the OWASP AppSec DC 2009. It allows you to manipulate the web application’s user interface to eliminate annoying limitations and client-side controls that interfere with the web application penetration test.

What can I do with Groundspeed?

Groundspeed allows you to modify the forms and form elements loaded in the page. Some practical uses include:

  • Changing the types of form fields, for example you can change hidden fields into text fields so you can easily edit their contents.
  • Quickly removing size and length limitations on text fields so you have more space to type your attack strings.
  • Changing form target so the form submits in another tab.
  • Removing or editing the JavaScript event handlers to bypass client side validation.

You can install Groundspeed here:

https://addons.mozilla.org/en-US/firefox/addon/46698/

Or read more here.

Posted in: Hacking Tools, Networking Hacking, Web Hacking

, , , , ,


Latest Posts:


RandIP - Network Mapper To Find Servers RandIP – Network Mapper To Find Servers
RandIP is a nim-based network mapper application that generates random IP addresses and uses sockets to test whether the connection is valid or not with additional tests for Telnet and SSH.
Nipe - Make Tor Default Gateway For Network Nipe – Make Tor Default Gateway For Network
Nipe is a Perl script to make Tor default gateway for network, this script enables you to directly route all your traffic from your computer to the Tor network.
Mosca - Manual Static Analysis Tool To Find Bugs Mosca – Manual Static Analysis Tool To Find Bugs
Mosca is a manual static analysis tool written in C designed to find bugs in the code before it is compiled, much like a grep unix command.
Slurp - Amazon AWS S3 Bucket Enumerator Slurp – Amazon AWS S3 Bucket Enumerator
Slurp is a blackbox/whitebox S3 bucket enumerator written in Go that can use a permutations list to scan externally or an AWS API to scan internally.
US Government Cyber Security Still Inadequate US Government Cyber Security Still Inadequate
Surprise, surprise, surprise - an internal audit of the US Government cyber security situation has uncovered widespread weaknesses, legacy systems and poor adoption of cyber controls and tooling.
BloodHound - Hacking Active Directory Trust Relationships BloodHound – Hacking Active Directory Trust Relationships
BloodHound is for hacking active directory trust relationships and it uses graph theory to reveal the hidden and often unintended relationships within an AD environment.


4 Responses to Groundspeed 1.1 – Web Application Security Add-on For Firefox

  1. Andy January 28, 2010 at 11:46 am #

    Just an FYI – the xpi link on mozilla addons doesn’t work.

    It seems to be around 600bytes in size.

  2. Darknet January 28, 2010 at 12:50 pm #

    Just installed it here, works fine 98.1kb on my end.

  3. dblackshell January 29, 2010 at 7:17 am #

    Or you could check my collection of Firefox pen-testing add-ons https://addons.mozilla.org/en-US/firefox/collection/wapt

  4. Andy February 5, 2010 at 4:40 pm #

    Thanks for the response, I managed to get a slightly older version from addons that worked without problems. It may have just been a browser hiccup or something.

    Oh and I hadn’t seen that collection before, that’s great. Always on the lookout for new tools/extensions. Bookmarked. :)