Crawling Ajax-driven Web 2.0 Applications | SecGuru

Crawling web applications is one of the key phases of automated web application scanning. The objective of crawling is to collect all possible resources from the server in order to automate vulnerability detection on each of these resources. A resource that is overlooked during this discovery phase can mean a failure to detect some vulnerabilities. The introduction of Ajax throws up new challenges

[amachang]

Ruby で実装した Narcissus を使って、クローラに JavaScript を実行させ、動的描画部分もクロールする。