What Are Web Proxies?

Web proxies are specialized tools that can be set up between a browser/mobile application and a back-end server to capture and view all the web requests being sent between both ends, essentially acting as man-in-the-middle (MITM) tools

Uses of Web Proxies

• Web application vulnerability scanning
• Web fuzzing
• Web crawling
• Web application mapping
• Web request analysis
• Web configuration testing
• Code reviews

There are numerous applications for this in Web Penetration Testing, such as testing for:

1. SQL injections
2. Command injections
3. Upload bypass
4. Authentication bypass
5. XSS
6. XXE
7. Error handling