WATOBO will enable security professionals to highly efficient (semi automatic) Web application security audits. The authors believe that the semi-automated approach is the best way to make a thorough examination and to identify most of the vulnerabilities is. It has no offensive skills and is responsible for the legal vulnerability testing provided. WATOBO works as a local proxy like WebScarab, Paros or BurpSuite.
- Time-based SQL injection module
- XSS module which gives a more accurate exploitability result
- ConversationTable: values in coloumn Parameters are url-decoded
- Added a WebCrawler Plugin based on Mechanize
- Manual Request Editor: Url is displayed in the window title