Response Analysis and Further Testing Tool - RAFT

Not an inspection proxy

RAFT is a testing tool for the identification of vulnerabilities in web applications. RAFT is a suite of tools that utilize common shared elements to make testing and analysis easier. The tool provides visibility in to areas that other tools do not such as various client side storage.

RAFT uses markup to create templates for fuzz testing

This post is about one more vulnerabilities identification tool. Although this tool is not so famous but works good. RAFT is a suit of security tools which are used as a testing tool for the vulnerability identification in web applications. RAFT utilize common shared elements to make testing and analysis easier. The tool provides visibility in to areas that other tools do not such as various client side storage.

RAFT is written in Python and PyQT.   
It requires Python 2.6.5 and above. Python 3 is not supported.

For Download & installation

http://code.google.com/p/raft/

raft-wordlists-20110803.7z

Smartfuzzing_The_Web_BlackHatUSA_2011.pdf

Installation

GettingStarted

AnalyzerBasics

AnalyzerDevelopment

Analysis

VIsit Website -

http://code.google.com/p/raft/

For more information -

http://seclists.org/pen-test/2012/Feb/24

http://blog.csdn.net/yatere/article/details/7552784