TamperIE Web Security Tool

TamperIE Web Security Tool works as a Browser Helper Object (BHO) for Internet Explorer, with the main purpose of helping developers detect vulnerabilities in their web-based applications and websites.

The component is compatible with versions 5 and above of Internet Explorer and can be used for penetration testing. What it actually does is tamper with the HTTP requests send from your computer to online servers via Internet Explorer, thus providing a way to identify security flaws that some web applications might have.

The package includes an example website that enables you to easily understand how it works. You just have to navigate to the URL you want to test and access the TamperIE main control panel from Internet Explorer's toolbar.

TamperIE Web Security Tool can tamper with both HTTP POST and GET data submission methods. You can instruct it to act exclusively on URL addresses that end with a specific text or on HTTP get requests that include query string data within the target URL.

In the provided example, you try to alter the price field in a simulated web-based shopping cart. If the component is active, pressing the 'Check Out' button will result in the appearance of a new window that enables you to edit the request your browser is sending to the server. Modifying the price in this dialog and sending the tampered request to the server will test its reliability.

TamperIE Web Security Tool can be used in order to assess the response of your web server to altered requests issued by a client browser. Practically, it can alter the data your computer is sending in order for the request to include user-defined information and thus evaluate the response of your web-based application in such situations.