What is Groundspeed?

Groundspeed is an open-source Firefox extension for web application security testers presented at the OWASP AppSec DC 2009. It allows you to manipulate the web application’s user interface to eliminate annoying limitations and client-side controls that interfere with the web application penetration test.

What can I do with Groundspeed?

Groundspeed allows you to modify the forms and form elements loaded in the page. Some practical uses include:

• Changing the types of form fields, for example you can change hidden fields into text fields so you can easily edit their contents.
• Quickly removing size and length limitations on text fields so you have more space to type your attack strings.
• Changing form target so the form submits in another tab.
• Removing or editing the JavaScript event handlers to bypass client side validation.

How does Groundspeed compare to the other webapp security tools?

Groundspeed was not created to replace other tools use for webapp security like Firebug or Burp, but it was designed to make the life of pentesters a little easier. You can read more about how Groundspeed compares to the other tools in the following posts from the blog:

• Groundspeed compared to Firebug and the WebDeveloper extension
• Groundspeed compared to client-side proxies

To learn more about Groundspeed

You can find more information about Groundspeed and the way it works in the following pages:

• The slides from the talk at OWASP AppSec DC 2009
• Screenshots of Groundspeed
• Videos of Groundspeed in action