Latest Content From net-square

Whitepaper: Crawling Ajax-Driven Web 2.0 Applications

by net-squareJan 01, 2008

Crawling web applications is one of the key phases of automated web application scanning. The objective of crawling is to collect all possible resources from the server in order to automate vulnerability detection on each of these resources. A resource that is overlooked during this discovery phase can mean a failure to detect some vulnerabilities. The introduction of Ajax throws up new challenges for the crawling engine. New ways of handling the crawling process are required as a result of these challenges. This paper uses a practical approach to address the issue using rbNarcissus, Watir and Ruby.