Welcome to WebScarab for Eclipse

WebScarab for Eclipse is an extensible framework for analyzing applications that communicate using the HTTP protocol. It includes an HTTP monitor and an HTTP proxy for recording all messages between your machine and remote servers.

It is a port to Eclipse of the WebScarab application from OWASP.

It consists of the following components:

  • Proxy: HTTP proxy that monitors HTTP communication.
  • Triggers: Eclipse extensions and user scripts that are executed on specific message patterns.
  • HTTP Summary View: Eclipse view that shows all recorded messages with the ability to save and edit the message content.

Help Wanted

Help speed up the development of WebScarab for Eclipse!

If you are interested in contributing a feature, want to write documentation, or help design a new logo, send a message to: thomas_de@users.sourceforge.net.

Donate to WebScarab

Latest news

  • WebScarab for Eclipse M1 Available - November 01 2005

    The first milestone of WebScarab for Eclipse is available. See the download page for instructions on how to download the release.

    Be sure to check out the New and Noteworthy page.

More About WebScarab for Eclipse

In its simplest form, WebScarab records the conversations (requests and responses) that it observes, and allows the operator to review them in various ways.

WebScarab is designed to be a tool for anyone who needs to expose the workings of an HTTP(S) based application, whether to allow the developer to debug otherwise difficult problems, or to allow a security specialist to identify vulnerabilities in the way that the application has been designed or implemented.