Ratproxy

Tested XSS the other day manually due to time constraint, using some xss cheat sheet from web. Found Google's tool Ratproxy then, played with it and write some notes about that.

Env: Ubuntu

1. Install  libssl and openssl

sudo apt-get install libssl-dev openssl

2. Download ratproxy from http://code.google.com/p/ratproxy/

3. cd ratproxy
     make

4. Set the browser proxy to localhost:8080

5. Start ratproxy
  ./ratproxy -v . -w *.log -d f url of site -lfscm

6. Then go to the website, manually click any page that can accept input text

7. Generate a html from *.log and analyze it