Using Simulation Engine

Top  Previous  Next

N-Stalker's "Simulation Engine" is a HTTP communication tool that allows you to synchronously test web server's response to a particular request, either the resource itself or even a user's modified request.

 

Under "Scanner Resource", "URI Options", you must click on "Simulation Engine". You will notice that resource's HTTP request information will be automatically loaded under "HTTP request" section.

 

Modifying a raw request

 

simulation-1

 

 

Under "Raw HTTP" tab, you will visualize HTTP request the way N-Stalker had requested to the web server. You are free to modify it, inserting or removing data in order to test web server's behavior. This is "raw" data so it will be sent to the server "AS IS" -- don't forget that it should follow the HTTP format to get a valid response.

 

Modifying a structured request

 

simulation-2

 

Under "Detailed HTTP" tab, you will visualize structured HTTP data, including HTTP headers and Cookies. You are free to modify it by either clicking over the selected row (to edit) or clicking on "Plus/Minus" buttons in the bottom area (to add/delete). Once modified, don't forget to get back to "Raw HTTP" tab to check the result.

 

Adding or removing HTTP variables

 

simulation-3

 

Under "HTTP variables" tab, you will visualize structured HTTP variables used within the request, including chosen HTTP method (in bottom area). You are free to modify these variables and its contents by clicking over it (to edit) or using "Plus/Minus" buttons in the bottom to add/remove variables. If you need to modify HTTP method used, use the combo box in the bottom. Don't forget to get back to "Raw HTTP" tab to check the result.

 

Sending data to the web server

 

simulation-4

 

Once everything is set, you are ready to send data to the target's web server. Hit the "Request Server" button in the upper area and await for results.

 

Inspecting web server's response

 

Under "HTTP Response" section, you will be able to inspect web server's response. You may use the following viewpoints:

 

"Raw HTTP": which provides a quick look at the response's "raw" data. You have the ability to search through it using the bottom tool bar (See "Investigating response" for more details).

 

simulation-5

 

"Detailed HTTP": which provides a structured view on the server's response data, including HTTP headers and Set-Cookies.

 

simulation-6

 

Inspecting response on "Browser View"

 

simulation-7

 

If you need to see the server's response under a browser's perspective, you may invoke "Browser View" control by clicking on the same name button. The retrieved HTML page will be displayed in a web browser control.