the-web-application-hackers-handbook

788 Chapter 20 n A Web Application Hacker’s Toolkit
TRY IT!
http://mdsec.net/addressbook/32/
In addition to built-in commands and libraries, you can call out to various
simple tools and utilities from Perl scripts and operating system shell scripts.
Some tools that are useful for this purpose are described next.
Wget
Wget is a handy tool for retrieving a specified URL using HTTP or HTTPS.
It can support a downstream proxy, HTTP authentication, and various other
configuration options.
Curl
Curl is one of the most flexible command-line tools for issuing HTTP and HTTPS
requests. It supports GET and POST methods, request parameters, client SSL
certificates, and HTTP authentication. In the following example, the page title
is retrieved for page ID values between 10 and 40:
#!/bin/bash
for i in `seq 10 40`;
do
echo -n $i “: “
curl -s http://mdsec.net/app/ShowPage.ashx?PageNo==$i | grep -Po
“(.*)” | sed ‘s/.......\(.*\)......../\1/’
done
TRY IT!
http://mdsec.net/app/
Netcat
Netcat is a versatile tool that can be used to perform numerous network-related
tasks. It is a cornerstone of many beginners’ hacking tutorials. You can use it to
open a TCP connection to a server, send a request, and retrieve the response.
In addition to this use, Netcat can be used to create a network listener on your
computer to receive connections from a server you are attacking. See Chapter 9