During the workshop we will solve some of the issues related to the automatic testing of exotic web applications.
Today's web applications like to make testers’ life difficult. They are sending the checksum of the input data or distort data using some kind of proprietary encoding. The automated tools are not able to figure the logic behind the website or will fail as they are not able to calculate the checksum
without the required information. Data sent without proper encoding will be decoded on the server side and will be invalid because of the decoding process. So, the tools will fail again.
To solve these kind of issues we will develop our own Burp extension to be able to use automated tools. Since version 1.6 it's much easier to write extensions even using the free edition.
As another possible solution we will write our „converter web page” which presents data to the automated tool as a classic form based page. Using this page one can use automated tools as usual.
We recommend attendance to everyone who is interested in testing web applications or develops them.