[WEB SECURITY] Crawling Ajax-driven Web 2.0 Applications

[bugtraq@xxxxxxxxxxxxxxx]

Saw this on net-security earlier today.

"Crawling web applications is one of the key phases of automated web application scanning. The objective of crawling is to collect all possible resources from the server in order to automate vulnerability detection on each of these resource s. A resource that is overlooked during this discovery phase can mean a failure to detect some vulnerabilities. The intro duction of Ajax throws up new challenges for the crawling engine. New ways of handling the crawling process are required as a result of these challenges. The objective of this paper is to use a practical approach to address this issue using r bNarcissus, Watir and Ruby."

URL:
http://www.net-security.org/article.php?id=973


- Robert
http://www.cgisecurity.com/ Website Security news and more
http://www.cgisecurity.com/index.rss [Security Feed]

----------------------------------------------------------------------------
The Web Security Mailing List: 
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/archive/
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]