I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.

Specifically, I'm looking for a tool that can cope with sending requests to binary RIA service endpoints.

Do such tools exist?

  • Frankly I'm interested in any automated penetration testing tools (more specifically network, but I'm happy to see any perspective). I religiously warn against automation, but I would love to be able to schedule a scan and see trending.
    – Ormis
    May 3, 2011 at 19:39
  • P.S. Core INSIGHT is something to look at, but not an answer to this question. coresecurity.com/content/CORE-INSIGHT-Enterprise
    – Ormis
    May 3, 2011 at 19:42
  • Product recommendations are discouraged here. Can you re-cast your question to ask about the features of a suitable tool, or something like that?
    – Bob Brown
    Feb 20, 2015 at 14:47

1 Answer 1


Short Answer: No (though with the speed of the web, by the time you read this things might have changed...)

Long Answer: There are several that may be helpful, but I haven't tried them

  • +1 and accepting this answer for now as Burp Suite + WCF binary SOAP plugin looks like it supports my need (although I also have not yet tried it...). May 13, 2011 at 10:21

Not the answer you're looking for? Browse other questions tagged or ask your own question.