Silverlight Spy 3

Hey LockBoxx readers! Today I have a really useful tool for all my security researchers and .NET developers. Do you write Silverlight, or evaluate web pages with Silverlight?? If so, you will probably be interested in Silverlight Spy, by First Floor Software. This is a really great application for analyzing all of the running Silverlight code on a page with a few extra-helpful extensions. This application is just waiting for the user, with it's own built in browser for testing all of the Silverlight content. Once the page is loaded, Silverlight Spy 3 allows the user to browse Silverlight source code, traverse the UI logic, explore the application storage, and extract the XAML file, all Silverlight properties the browser typically hides from the user. This is a HUGE time saver, both as a security researcher, and Silverlight developer. Silverlight Spy 3 also comes with a DLR command shell for writing your own python and ruby scripts on the spot (pen-testers I'm looking at you)!! Although, by far my favorite feature is the Event Monitor, which lists every interaction with the Silverlight UI. Coupled with the Performance Monitor, you can hunt down bugs and find problem spots in professional applications with minimal effort. All of this content comes with the free 21-day trial of Silverlight Spy 3. They also have a brand new version: Silverlight Spy 4, although this is paid only and they don't detail feature differences, so until I get more info enjoii the tool and keep hacking!