Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.

Specifically, I'm looking for a tool that can cope with sending requests to binary RIA service endpoints.

Do such tools exist?

share|improve this question
Frankly I'm interested in any automated penetration testing tools (more specifically network, but I'm happy to see any perspective). I religiously warn against automation, but I would love to be able to schedule a scan and see trending. –  Ormis May 3 '11 at 19:39
P.S. Core INSIGHT is something to look at, but not an answer to this question. coresecurity.com/content/CORE-INSIGHT-Enterprise –  Ormis May 3 '11 at 19:42

1 Answer 1

up vote 1 down vote accepted

Short Answer: No (though with the speed of the web, by the time you read this things might have changed...)

Long Answer: There are several that may be helpful, but I haven't tried them

share|improve this answer
+1 and accepting this answer for now as Burp Suite + WCF binary SOAP plugin looks like it supports my need (although I also have not yet tried it...). –  Matthew Murdoch May 13 '11 at 10:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.