• 1
• 2
• 3
• 4
• 5

admin ajax application applications article assessment attacks backend based breakpoint browser call calls chickenfoot client code comment comments crawler crawlers crawling debugging download entire events execution figure file firebug firefox form function functions generation getme hacking http javascript links logic login methodologies object onclick page post preceding process property ref resource script security service services set shown side simple step tools truth validationjs wallpapers web xhr

Keyword Cloud Navigation Map

Crawling challenges and browser simulation

An important reconnaissance tool when performing web application assessment is a web crawler. A web crawler crawls every single page and collects all HREFs (links). But what if these HREFs point to a JavaScript function that makes Ajax calls using the XHR object? The web crawler may miss this information altogether. In many cases it becomes very difficult to simulate this environment. For example, here is a set of simple links:

<a href=”#” onclick=”getMe(); return false;”>go1</a><br>
<a href=”/hi.html”>go2</a><br>
<a href=”#” onclick=”getMe(); return false;”>go3</a><br>

Read Full Tutorial...