It provides not only monitor but can also edit/reply the HTTP requests. In this scenario, we can setup a reverse proxy on web server end to monitor all incoming/outgoing requests on web server.įor windows platform, Fiddler is recommended. There is situation that we would like to monitor all HTTP incoming requests on web server but we can't change configuration on the browser or application client-side.

Monitor HTTP traffic without changes of end user Browser proxy or client-side application.

Monitor all incoming and outgoing HTTP requests to the Web Server to inspect any suspicious requests.The testing techniques listed below is primary focused on how we can monitor HTTP requests without changes of client-side which will be more close to production usage scenario. This will require changes of proxy on client-side application or browser. AppScan, BurpSuite, ZAP) act as HTTP Proxy. The purpose of this testing is to verify if there is unnecessary or suspicious HTTP request sending in the background. This section describes how to monitor all incoming/outgoing HTTP requests on both client-side or server-side.

Wireshark http requests sent