Spider on ZAP

Spider Automation Framework Support

Mon, 01 Jan 0001 00:00:00 +0000

Spider Automation Framework Support

This add-on supports the Automation Framework.

Job: spider

The Spider job runs the Traditional Spider. This is fast but does not handle modern applications as effectively.

Spider dialog

Mon, 01 Jan 0001 00:00:00 +0000

Spider dialog

This dialog launches the Spider.

Scope

The first tab allows you to select or change the starting point.
If the starting point is in one or more Contexts then you will be able to choose one of them.
If that context has any Users defined then you will be able to select one of them.
If you select one of the users then the spider will be performed as that user, with ZAP (re)authenticating as that user whenever necessary.

Spider tab

Mon, 01 Jan 0001 00:00:00 +0000

Spider tab

The Spider tab shows you the set of unique URIs found by the Spider during the scans.

The ‘New Scan’ button launches the Spider dialog which allows you to specify exactly what should be scanned.

The Spider can be run on multiple Sites in parallel and the results for each scan are shown by selecting the scan via the ‘Progress’ pull-down.

Options Spider screen

Mon, 01 Jan 0001 00:00:00 +0000

Options Spider screen

This screen allows you to configure the Spider options.

It should be noted that modifying most of these options also affects the running Spider.

Maximum depth to crawl

The parameter defines the maximum depth in the crawling process where a page must be found in order for it to be processed. Resources found deeper than this level are not fetched and parsed by the spider. The value zero means unlimited depth.