Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.

Specifically, I'm looking for a tool that can cope with sending requests to binary RIA service endpoints.

Do such tools exist?

share|improve this question

closed as off-topic by Bob Brown, RoraΖ, Jens Erat, Eric G, John Deters Feb 21 '15 at 5:11

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

Frankly I'm interested in any automated penetration testing tools (more specifically network, but I'm happy to see any perspective). I religiously warn against automation, but I would love to be able to schedule a scan and see trending. – Ormis May 3 '11 at 19:39
P.S. Core INSIGHT is something to look at, but not an answer to this question. – Ormis May 3 '11 at 19:42
Product recommendations are discouraged here. Can you re-cast your question to ask about the features of a suitable tool, or something like that? – Bob Brown Feb 20 '15 at 14:47
up vote 1 down vote accepted

Short Answer: No (though with the speed of the web, by the time you read this things might have changed...)

Long Answer: There are several that may be helpful, but I haven't tried them

share|improve this answer
+1 and accepting this answer for now as Burp Suite + WCF binary SOAP plugin looks like it supports my need (although I also have not yet tried it...). – Matthew Murdoch May 13 '11 at 10:21

Not the answer you're looking for? Browse other questions tagged or ask your own question.