Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Mar 28, 2012

Generating Traffic Learnings through Explore scans

Hello All / Aaron,     To generate useful learning traffic (becasue say the site is not really used) , Is it a good idea to run a web app scan in the "Explore Mode". This will access every url...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Mar 28, 2012
Hi Nik,

 

 

I generally don't define every URL for a web app in a policy. I define the filetypes and lock down the metacharacters for URLs and the rest of the charsets. I then define explicit URLs if there are is a character set violation for a URL. If there are odd metacharacters in the URLs, then a crawl of the site might help. Or if you have a lot of filetypes it would help to run the crawler.

 

 

Are you able to put the policy in transparent mode on a production virtual server that does receive traffic?

 

 

Aaron