1

I thinking about use a various mix of different scanner such as:

Burp-suite
Acunetix Vulnerability Scanner
Arachni
Owasp Zed Attack Proxy Project
Vega
W3af

though we have Active directory that is integrated with Identify Manager. (All the operations are performed in Novel Identity Manager (or Mostly Are) and are forwared to Active Directory).

Now is my question

How to use a web vulnerability scanner to autenthicate through ad in order to the scan?

what would you recommend to do this?

Thank you in advance

2
  • Arachni does a pretty good job at logging in to the application. You can check support.arachni-scanner.com/kb/general-use/… for additional information. – TiredOfProgramming Mar 6 '18 at 19:11
  • pretty much Arachni spawns a headless browser called PhantomJS(phantomjs.org) and Watir(watir.com) (Ruby representation of Selenium webdriver). With that being said, you can write your own Ruby (.rb) or JavaScript (.js) script to authenticate through the login screen of your web application. – TiredOfProgramming Mar 7 '18 at 14:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.