WebScarab is another web proxy full of features that may be interesting to penetration testers. In this recipe, we will use it to spider a website.
Using WebScarab
Getting ready
In its default configuration, WebScarab uses port 8008 to capture HTTP requests, so we need to configure our browser to use that port in the localhost as a proxy. We follow steps similar to those of the OWASP ZAP and Burp Suite configurations in the browser; in this case the port must be 8008.
How to do it...
WebScarab can be found in Kali's Applications menu; go to 03 - Web Application Analysis...
