Help and Other Information

This is basically a nice little interface into SPIKE Proxy 1.1. To use it, you eithar click through the heirarchy of the requests (located to the right of the main window) or you click on request cache. You will see something like this:
POST3592989045638HTTPA1.12001870221480374626616159141244082612_loginnet.passport.com
Print Request Info, rewrite request, Display Response, crawl, argscan, dirscan, overflow

That is a "request" (a POST to passport.com, in fact) which you can then resubmit. If you make multiple unique requests to a particular URL, they will each be stored . Requests that are exactly alike are discarded.

If you want to resubmit this request, click on "rewrite request".

If you just want to see information about this request, click "print request info". Simple, eh?

Clicking Display Reponse will show you what the server responded with. Clicking "crawl" will currently display a "Not Implemented" error message. Clicking argscan or overflow will attempt to SQL inject or overflow any arguments SPIKE Proxy recognized. If it detects any interesting error messages, that request will be saved off and logged.

One fun thing to do is browse your entire site, then go to the top level and click "argscan" which will then recurse through your entire site and look for ODBC errors. Fun, huh?

If you have any other questions, e-mail the author at dave@immunitysec.com