I must test a website for insufficient authentication. Use case:
- I go to website which I'll testing.
- Log in as admin(user with the highest permissions/privileges)
- Run some tool.
- Tool has login and password for regular user which doesnt has permissions that admin has.
- Tool intercepts requests that I call manually as admin via browser
- Then tool remove cookies from request which it intercepts and substitutes it with credentials for regular user
- Then tool passes request but with cookies of regular user and shows response of request in the other browser or somewhere else.
Im looking this kind of tool. Can anyone recommend me one?