Patent ID: 7647631

Claim:
A method for performing a vulnerability assessment of a computer application that is accessible through a network as a web application by monitoring user interactions with the computer application through a network application and storing at least portions of the user interactions for playback during a vulnerability assessment, the method comprising the steps of: invoking a network application used to interact with the computer application through the use of a plurality of winsocks; searching the network application to discover where at least some of the plurality of winsocks reside in memory; setting a breakpoint at the start of at least one of the of the discovered winsocks; detecting the occurrence of hitting breakpoints as the result of user interactions with the web application through the network application; in response to each detection of hitting a breakpoint: suspending operation of the network application; probing the network application to obtain data identifying the user interactions with a web application; recording the obtained data as recorded interactions; and resuming operation of the network application; and playing back the user interactions to simulate a user interacting with the computer application through the network application, to perform a vulnerability assessment of the web application using the recorded interactions.