-
-
Notifications
You must be signed in to change notification settings - Fork 135
HelpAddonsSpiderAjaxTab
The AJAX Spider tab shows you the set of unique URIs found by AJAX Spider.
For each request you can see:
The request index - each request is numbered, starting at 1 | |
The request timestamp | |
The HTML method, e.g. GET or POST | |
The URL requested | |
The HTTP response status code | |
A short summary of what the HTTP response code means | |
The length of time the whole request took | |
The size of the response header | |
The size of the response body | |
Any Alerts on the request | |
Any Notes you have added to request | |
Any Tags you have added to request |
Selecting a requests will display it in the Request tab and Response tab above.
Right clicking on a node will bring up a menu which will allow you to:
The Attack menu has the following submenus:
This will initiate an Active Scan of the whole of the site containing the selected node. The Active Scan tab will be display and will show the progress of the scan.
This will initiate an Active Scan of just the node selected. The Active Scan tab will be display and will show the progress of the scan.
This will initiate a spider of the whole of the site containing the selected node. The Spider tab will be display and will show the progress of the scan.
This will initiate a forced browse of the whole of the site containing the selected node. The Forced Browse tab will be display and will show the progress of the scan.
This will initiate a forced browse on the selected directory. The Forced Browse tab will be displayed and will show the progress of the scan.
This will initiate a forced browse on the selected directory and all children found. The Forced Browse tab will be displayed and will show the progress of the scan.
This menu has the following submenus:
This will exclude the selected nodes from the proxy. They will still be proxied via ZAP but will not be shown in any of the tabs. This can be used to ignore URLs that you know are not relevant to the system you are currently testing. The nodes can be included again via the Session Properties dialog
This will prevent the selected nodes from being actively scanned. The nodes can be included again via the Session Properties dialog
This will prevent the selected nodes from being spidered. The nodes can be included again via the Session Properties dialog
This menu allows you to invoke applications that you have configured via the Options Applications screen which is also accessible via the 'Configure applications...' submenu.
This will bring up the Manage Tags dialog which allows you to change the tags associated with the request.
This will bring up the Add Note dialog which allows you to record notes related to the request.
This will bring up the Add Break Point dialog which allows you to set a break point on that URL.
If the URL selected has alerts associated with it then they will be listed under this menu. Selecting one of the alerts will cause it to be displayed.
This will bring up the Resend dialog which allows you to resend the request after making any changes to it that you want to.
This will bring up the Add Alert dialog which allows you to manually record a new Alert against this request.
This will open the URL of the selected node in your default browser.
AJAX Spider | for an overview of the AJAX Spider | |
Options AJAX Spider screen | for an overview of the AJAX Spider Options | |
AJAX Spider dialog | for an overview of the AJAX Spider Dialog |
-
ZAP User Guide
- Introduction
-
Getting Started
- Configuring proxies
-
Features
- Active Scan
- Add-ons
- Alerts
- Anti CSRF Tokens
- API
- Authentication
- Break Points
- Callbacks
- Contexts
- Data Driven Content
- Filters
- Globally Excluded URLs
- HTTP Sessions
- Man-in-the-middle Proxy
- Modes
- Notes
- Passive Scan
- Scan Policies
- Scope
- Session Management
- Spider
- Statistics
- Structural Modifiers
- Structural Parameters
- Tags
- Users
- Scanner Rules
- A Simple Penetration Test
-
The User Interface
- Overview
- The Top Level Menu
- The Top Level Toolbar
- The Tabs
-
The Dialogs
- Active Scan
- Add Alert
- Add Break Point
- Add Note
- Encode/Decode/Hash
- Filter
- Find
- History Filter
- Manual Request Editor
- Manage Add-ons
- Manage Tags
-
Options
- Active Scan
- Active Scan Input Vectors
- Alerts
- Anti CSRF Tokens
- API
- Breakpoints
- Callback Address
- Certificate
- Check for Updates
- Connection
- Database
- Display
- Dynamic SSL Certificates
- Extensions
- Global Exclude URL
- HTTP Sessions
- JVM
- Keyboard
- Language
- Local Proxies
- Passive Scan Rules
- Passive Scan Tags
- Passive Scanner
- Rule Configuration
- Scripts
- Search
- Spider
- Statistics
- Persist Session
- Resend
- Scan Policy Manager
- Scan Progress
- Session
- Spider
- The Footer
- Command Line
- Add Ons
- Releases
- Paros Proxy
- Credits