Nessus Importing cookies for Web application security scanning

Source: Internet
Author: User
Tags nessus scan

When you do not import cookies using Nessus to scan, the results of the scan is relatively simple, many deep problems can not be scanned out.

We need to manually import cookies, the results of a status scan with cookies will be more detailed and deeper, the following is the procedure:

In the Website login state, enter Document.cookie in the browser address bar to move the cursor to the beginning of the line manually enter javascript:
The full format is as follows:

1 javascript:document.cookie

You can view the cookie information after carriage return, such as:

Access http://www.crdx.org/misc/cookies for cookie format conversions, such as:

Enter the destination address domain name, paste the information you just copied into the input column, and click Generate to generate the cookie information in the standard format.

Save the generated cookie information to a text file and save it as an arbitrary file name.

In the authentication method item in the Nessus Scan configuration, select HTTP Cookies Import, click the Add file below and import the text file you just saved.

At this point the scan is with the cookie state.

Nessus Importing cookies for Web application security scanning

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.