


XML-driven web services that are running on SOAP, XML-RPC and REST are empowering server-side components. The newly coined term “web 2.0” refers to the next generation of web applications that have logically evolved with the adoption of new technological vectors. methodical approach to vulnerability detection.debugging of applications from a security standpoint, using the Firebug debugger.simulation of browser event automation with the Chickenfoot plugin.discovery of XHR calls with the Firebug tool.hacking challenges such as discovering hidden calls, crawling issues, and Ajax side logic discovery.web 2.0 application architecture and its security concerns.The key learning objectives of this article are to understand the: This article looks at some of the methods, tools and tricks to dissect web 2.0 applications (including Ajax) and discover security holes using Firefox and its plugins. This technological transformation brings about new challenges for security professionals. AJAX and interactive web services form the backbone of “web 2.0” applications.
