AJAX Spider on ZAP

Ajax Spider Automation Framework Support

Mon, 01 Jan 0001 00:00:00 +0000

Ajax Spider Automation Framework Support

This add-on supports the Automation Framework.

Job: spiderAjax

The spiderAjax job allows you to run the Ajax Spider - it is slower than the traditional spider but handles modern web applications well.

AJAX Spider Context

Mon, 01 Jan 0001 00:00:00 +0000

AJAX Spider Context

This screen allows you to manage Context data for the AJAX Spider.

Excluded Elements

Allows to configure the elements that should be excluded from the crawling.

AJAX Spider dialog

Mon, 01 Jan 0001 00:00:00 +0000

AJAX Spider dialog

This dialog launches the AJAX Spider.

Scope

The first tab allows you to change key features like:

Starting Point

The URL which the AJAX spider will start crawling from, or a context (in which case it will be used one of the URLs that are in context as starting point).

Options AJAX Spider screen

Mon, 01 Jan 0001 00:00:00 +0000

Options AJAX Spider screen

This screen allows you to configure the AJAX Spider options. The AJAX Spider is an add-on for a crawler called Crawljax. The add-on sets up a local proxy in ZAP to talk to Crawljax. The AJAX Spider allows you to crawl web applications written in AJAX in far more depth than the native Spider. Use the AJAX Spider if you may have web applications written in AJAX. You should also use the native Spider as well for complete coverage of a web application (e.g., to cover HTML comments).

AJAX Spider tab

Mon, 01 Jan 0001 00:00:00 +0000

AJAX Spider tab

The AJAX Spider tab shows you the set of unique URIs found by AJAX Spider.

For each request you can see:


	The request index - each request is numbered, starting at 1
	The request timestamp
	The HTML method, e.g. GET or POST
	The URL requested
	The HTTP response status code
	A short summary of what the HTTP response code means
	The length of time the whole request took
	The size of the response header
	The size of the response body
	Any Alerts on the request
	Any Notes you have added to request
	Any Tags you have added to request

Selecting a requests will display it in the Request tab and Response tab above.