Adding Target and Setting Up Authentication

Adding Target and Setting Up Authentication

Adding a target and configuring authentication are essential steps in setting up a security scan. Here’s a guide to walk you through these steps to ensure a comprehensive security assessment of your web application.

Adding a Target

  1. Navigate to the Dashboard: Start from the side menu Setting > Targets and click Add New Target.
  2. Enter Target URL: Input the URL of the web application you want to scan. Ensure the URL format is correct (e.g., including "https://").
  3. Assign Target Name (Optional): You may also assign a recognizable name to the target to keep track of different scans if you have multiple applications.
  4. Save Target: Once everything is configured, click Save to add the target. You can now queue this target for scanning or schedule it for later.

Setting Up Authentication

For web applications that require user authentication, setting up authentication ensures that the scan covers secure, restricted areas of the application. Here’s how to set up authentication:

  1. Locate Authentication Settings: In the target setup screen, look for an Authentication section.
  2. Choose Authentication Type: Select the authentication type applicable to your web application.
    • Form Authentication with cookies: not yet completed
    • Form Authentication with JWT: not yet completed
    • Manual login flow setup: not yet completed

 

  1. Test Authentication: Use the Test Authentication feature to confirm the tool can successfully log in with the provided details. This step ensures that the scan will access authenticated sections of the application.
  2. Save Authentication Settings: Once verified, save the settings.

    • Related Articles

    • Getting Started with web-scanner.app

      Setting up an account is the first step to start using web-scanner.app. Follow these simple steps to create and configure your account: 1. Visit the Registration Page Go to the web-scanner.io and click on the Sign Up button. Enter Your email address. ...

    • Understanding Scan Results

      Once a scan is complete, the results provide essential insights into the vulnerabilities detected, their severity, and suggested remediation steps. Here’s how to understand and make the most of your scan results. 1. Accessing Scan Results Navigate to ...

    • Steps to Schedule a Scan

      Scheduling scans ensures that your web application is regularly monitored for vulnerabilities without manual intervention. Here’s how to set up a scheduled scan in web-scanner.app 1. Navigate to Scheduled Scan Settings Go to Settings from the main ...

    • Assigning Issues to Team Members for Resolution

      Assigning detected issues to specific team members allows for streamlined remediation and accountability. Here’s how you can assign vulnerabilities identified in a scan to a team member in ActiveQ. 1. Navigate to the Scan Results Go to Completed ...