Can anyone comment on whether or not w3af supports certificate based authentication when testing a web app?
I've searched the mail archives and there was one thread from 2009 that suggested that the only way to do this is to proxy w3af traffic with a tool that *does* support this (ie. webscarab). Is this still the case? ---- Philip J. Hartlieb (PhD.) GSLC / Security+ "They would take their software out and race it in the black desert of the electronic night." -- Snow Crash
------------------------------------------------------------------------------ This SF.net email is sponsored by Make an app they can't live without Enter the BlackBerry Developer Challenge http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________ W3af-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/w3af-users
