Find Web Vulnerabilities with rat proxy
lcamtuf, from the Google Security team, just released ratproxy! It’s a web proxy that will automatically generate reports of potential XSS, XSRF, XSSI, charset, content type, and caching issues that it sees. Ratproxy is not only free, but also open source. I’ve had the pleasure of using it for the past few months and it’s definitely sped up my web security assessments.
Here’s a pretty screenshot of it in action:
