appscan 9.0ÏÂÔØÊÇÒ»¿î¿Í»§ÌåÑé¶Èͦ¸ßµÄ»¥ÁªÍøϵͳ©¶´É¨ÃèרÓù¤¾ß£¬ÊÇ×Ô¶¯»¯¼¼ÊõwebÍøÂ簲ȫÐÔɨÃèÎäÆ÷£¬ÊÊÓöàÓÃ;ÃüÁÖÇÄÜ»¯ÁéÇɼìÑéÄúµÄwebÓ¦Óð²È«ÐÔ£¬Ï²°®µÄÅóÓÑÃǸϿìÀ´¶àÌØÈí¼þÕ¾ÍøÔÚÏßÏÂÔس©Íæ°É£¡
appscan 9.0ÏÂÔØÌصã
Appscan 9.0±êÅäÓкܶàеÄ×÷Óã¬ÔÚÆäÖоø´ó¶àÊý½«ÔÚÎÒÏÂÃæµÄ¸ÅÊöÖаüº¬£º
FlashÊÊÓãº9.0 AppscanÏà¶ÔÐÔ³õÆڵİ汾ºÅÌáÉýÁËflashÊÊÓÃ×÷Óã¬Ëü¿ÉÒÔ̽Ë÷ºÍ²âÊÔ¸ù¾ÝadobeµÄFlex¼Ü¹¹µÄÓ¦ÓóÌÐò£¬Ò²ÊÊÓÃAMFÐÒå¡£
Glass box testing:£ºGlass box
testingÊÇAppscanÖÐÒý½øµÄÒ»¸öеÄ×÷ÓÃ.ÕâÒ»»·½ÚÖУ¬°²ÑbÒ»¸ö·þÎñÆ÷´úÀí,ÕâÓÐÀûÓÚ·¢¾õDZ²ØµÄURLºÍÆäÓàµÄÎÊÌâ¡£
Web·þÎñɨÃ裺Web·þÎñɨÃèÊÇAppscanÖо߱¸ºÏÀí×Ô¶¯»¯¼¼ÊõÊÊÓõÄÒ»¸öɨÃè×÷Óá£
java½Å±¾ÖÆ×÷°²È«ÐÔÆÊÎö£ºAppscanÖÐÏêϸ½éÉÜÁËJavaScript°²È«ÏµÊýÆÊÎö,ÆÊÎöÅÀÈ¡htmlÒ³Ãæϵͳ©¶´£¬²¢ÈÝÐí¿Í»§ÖÂÁ¦ÓÚ²»Ò»ÑùµÄÊÖ»ú¿Í»§¶ËÎÊÌâºÍDOM£¨Îı¾ÎĵµÁìÓòÄ£ÐÍ£©Îª»ù±¾µÄXSSÎÊÌâ¡£
»ã±¨£ºÒÀ¾ÝÄãµÄ¹æ¶¨£¬¿ÉÒÔת»¯³ÉËùÐèÎļþ¸ñʽµÄ»ã±¨¡£
ÐÞ²¹ÊÊÓãºÕë¶ÔÃ÷È·µÄϵͳ©¶´,³ÌÐòÁ÷³Ì¸øÓèÁËÏàÓ¦µÄϵͳ©¶´ÐðÊöºÍ»Ö¸´¼Æ»®·½°¸.
¿É¶©ÖƵÄɨÃè¶Ô²ß£ºAppscanÅäÖÃÒ»Ì××Ô¶¨µÄɨÃè¶Ô²ß,Äã¿ÉÒÔ¶©ÖƺÏÊÊÄãÐèÒªµÄɨÃè¶Ô²ß¡£
רÓù¤¾ßÊÊÓãºËüÓÐÏñÑéÖ¤²âÊÔ£¬¶¯Ì¬¿ÚÁî½âÎöÆ÷ºÍHTTPÒªÇó±à¼Èí¼þµÈ,±ã½ÝÊÖ¶¯Ê½²âÊÔϵͳ©¶´.
AjaxºÍDojo¼Ü¹¹µÄÊÊÓá£Èç½ñ£¬Ê¹ÎÒÃǼÌÐøѧϰ´óÁ¿Ïà¹Ø°²ÑbºÍÓ¦ÓÃRati??onal AppScanɨÃèWebÓ¦ÓóÌÐòµÄÈ«¹ý³Ì¡£
ÒªÔË×÷AppscanµÄϵͳÈí¼þͨ³£±ØÐë2GBµÄRAM,Óë´Ëͬʱ±£Ö¤°²ÑbÁË.net framworkºÍAdobe
flashÀ´ÊµÐÐɨÃèÈ«¹ý³ÌÖеÄFlashƒÈÈÝ¡£ÔÚ½øÒ»²½ÒÔÇ°£¬±ØÐëÁôÒâµÄÊÇ,ÕâÀàÈ«×Ô¶¯É¨Ãè°å»á´«ËÍÊý¾Ýµ½ÍøÂç·þÎñÆ÷,ÓпÉÄÜÔÚɨÃèÈ«¹ý³ÌÖÐÈÃÍøÂç·þÎñÆ÷³¬³ö¸ºÔØ£¬Òò´ËËüºÜÓпÉÄÜ»áɾµôÍøÂç·þÎñÆ÷ÉϵÄÊý¾ÝÐÅÏ¢£¬¼ÓÉÏмͼÄËÖÁÈ÷þÎñÆ÷±ÀÀ£.Òò¶øɨÃèÒÔÇ°×îºÃÊDZ¸·ÝÊý¾ÝÈ«²¿µÄÊý¾ÝÐÅÏ¢.
°²ÑbAppscanÒÔÇ°£¬¹ØµôÈ«²¿¿ªÆôµÄÓ¦ÓóÌÐò¡£µãһϰ²×°°ü£¬»á·¢Éú°²ÑbÖ¸µ¼,¼ÙÈçÄ㶼»¹Ã»°²Ñb.Net
framwork£¬Appscan°²Ñb¹ý³ÌÖлá×Ô¶¯°²×°£¬²¢±ØÐëÖØÆô¡£ÒÀÕÕÖ¸µ¼µÄ±êʾ£¬¿ÉÒԷdz£ÈÝÒ׵ĽøÐа²Ñb.¼ÙÈçÄãÓ¦ÓõÄÊÇĬÈÏÉèÖÃÅú×¼£¬Ä㽫ֻÈÝÐíɨÃèappscanÖеIJâÊÔÍøÖ·¡£ÒªÉ¨Ãè×ÔÉíµÄÍøÖ·£¬±ØÐ븶Ǯѡ¹ºÅú×¼°æ±¾ºÅ.
̽Ë÷ºÍ²âÊÔ»·½Ú£º
ÔÚ´ó¼ÒÖð½¥É¨ÃèÒÔÇ°£¬Ê¹ÎÒÃǶÔAppscanµÄ¹¤×÷ÖÐ×öÒ»¸öÕÆÎÕ.Ò»ÇÐ×Ô¶¯»¯¼¼ÊõɨÃèÆ÷¶¼ÊÇÓÐ2¸ö×ÜÌåÄ¿±ê£ºÕÒµ½È«²¿¿ÉÒÔÓõÄÁ¬½ÓºÍ½ø¹¥ÕÒÑ°Ó¦ÓóÌÐòϵͳ©¶´¡£
̽Ë÷(Explore):
ÔÚ̽Ë÷»·½Ú£¬Appscan³¢ÊÔ½âÎöxmlÍøÖ·ÖÐÈ«²¿¿ÉÒÔÓõÄÁ¬½Ó£¬²¢´´½¨Ò»¸ö½á¹¹·ÖÎö¡£Ëü·¢³öÇëÇ󣬲¢ÒÀ¾Ý»ØÓ¦À´·Ö±æÄĶùÊÇÒ»¸öϵͳ©¶´µÄΣº¦·¶³ë¡£±ÈÈ磬¼ûµ½Ò»¸öµÇ½ҳÃ棬Ëü»áÃ÷È·¸ù¾Ý±Ü¹ýÒýÈëÀ´¸ù¾ÝÈÏÖ¤.ÔÚ̽Ë÷»·½Ú²»ÊµÐÐÒ»ÇеĽø¹¥£¬½ö½öÃ÷È·²âÊÔ·½Î».ÕâÒ»»·½Ú¸ù¾ÝÍÆË͵ĺü¸¸öÒªÇóÃ÷È·ÍøÖ·µÄ¹¹ÔìºÍ½«Òª²âÊÔµÄϵͳ©¶´·¶³ë¡£
²âÊÔ(Test)£º
ÔÚ²âÊÔ»·½Ú,Appscan¸ù¾Ý½ø¹¥À´²âÊÔÔËÓÃÖеÄϵͳ©¶´.¸ù¾ÝÊͷųöÀ´µÄ¾ßÌå½ø¹¥µÄÖØÁ¦Ìݶȣ¬À´Ã÷È·ÔÚ̽Ë÷»·½Ú´´½¨µÄÍøÂ簲ȫÎÊÌâµÄ×´¿ö.²¢ÒÀ¾ÝÏàÓ¦µÄÃ÷ÏÔˮƽÅÅÐС£
ÔÚ²âÊÔ»·½ÚºÜÓпÉÄܻط¢¾õÍøÖ·µÄÐÂÁ¬½Ó£¬Òò¶øAppscanÔÚ̽Ë÷ºÍ²âÊÔ»·½Ú½øÐкó»áÖð½¥ÁíÒ»ÂÖµÄɨÃ裬²¢Ôٴη´¸´ÒÔÉϵÄÈ«¹ý³Ì£¬Ö±µ½›]ÓÐеÄÁ¬½Ó¿ÉÒÔ²âÊÔ¡£É¨ÃèµÄƵ´Î»¹¿ÉÒÔÔÚ¿Í»§µÄ°²×°ÖÐÅ䱸.
Öð½¥AppscanɨÃ裺
AppscanµÄʹÓðæ¿ÉÒÔ´ÓϱߵÄÁ¬½Ó°²×°ÏÂÔØ£º
http://www.ibm.com/developerworks/downloads/r/appscan/~~V
Öð½¥É¨Ãè,ÔËÐÐAppscan£¬ÄãÄܼûµ½Í¼Ò»ÖÐËùÏÔʾµÄÈÈÁÒ»¶ÓÏÔʾÆÁ.
µãÒ»ÏÂCreate New Scan Öð½¥É¨ÃèÒ»¸öеÄWebÓ¦ÓóÌÐò
ÌôÑ¡Ò»¸öºÏÊÊÄã¹æ¶¨µÄɨÃèÄ£°æ¡£Ä£°æ°üº¬ÔçÒѶ¨Î»ºÃµÄɨÃèÅ䱸.ÌôÑ¡Ò»¸öÄ£°æºó»á·¢ÉúÅ䱸ָµ¼¡£Ëü»áѯÎÊÄãÌôÑ¡µÄɨÃèÖÖÀ࣬ÌôÑ¡Web Application
Scan£¬ËæºóµãÒ»ÏÂNext
ɨÃèÅ䱸ָµ¼ÊǸÃרÓù¤¾ßµÄ¹Ø¼üÒ»²¿·Ö,Ó¦ÓÃÉèÖÃÏòµ¼£¬»áÈÃAppscanÁ˽âµÄÒªÇó,ÔÚÆäÖÐÓкܶàÄܹ»µÄÒªÇóÌôÑ¡.
URL and Servers(URLºÍÍøÂç·þÎñÆ÷)
#8205;#8205;Starting
URL(ÆðÖ¹ÍøÕ¾µØÖ·)£º#8205;#8205;´Ë×÷ÓÃÌض¨ÒªÉ¨ÃèµÄÆðÖ¹ÍøÕ¾µØÖ·.Ôڴ󲿷Ö×´¿öÏ£¬Õ⽫ÊǸÃÕ¾µãµÄµÇ½ҳÃæ.ÌôÑ¡http://demo.testfire.netÕâÒ»ÑÝÊÔÕ¾À´²âÊÔWebÓ¦ÓóÌÐòϵͳ©¶´.¼ÙÈçÄãÒªÏÞ¶¨Ö»É¨Ãèµ½ÕâÒ»ÎļþĿ¼ÏµÄÁ¬½Ó,Ñ¡¶¨¸Ã¹´Ñ¡¿ò.
#8205;#8205;Case Sensitive
Path(´óСд×ÖĸµÄÌôÑ¡):#8205;#8205;¼ÙÈçÄãµÄÍøÂç·þÎñÆ÷URLÓдóСд×ÖĸµÄ²î±ð,ÌôÑ¡¸ÃÏî¡£¶Ô´óСд×ÖĸµÄ²î±ðÔÚÓÚÍøÂç·þÎñÆ÷µÄµçÄÔ²Ù×÷ϵͳ,Linux/UnixÖжԴóСд×ÖĸÊÇÃôÈñµÄ,¶øWindowsÊÇ›]ÓеÄ.
Additional Servers and
Domains(´ËÍâµÄÍøÂç·þÎñÆ÷ºÍÓò):ÔÚɨÃèÈ«¹ý³ÌÖÐAppscanÊÔ×ÅÅÀÈ¡±¾Õ¾ÉϵÄÈ«²¿Á¬½Ó¡£µ±Ëü¿´µ½ÁËÒ»¸öµØÖ·Æ«Ïò²»Ò»ÑùµÄÓò,ËüÊDz»ÈÝÒ׿ªÕ¹É¨Ãè½ø¹¥µÄ,³ý·ÇÊÇÔÚAdditional
Servers and
DomainsÖÐÓÐÌض¨.Òò¶ø,¸ù¾ÝÌض¨¸Ã±êʶϵÄÁ¬½Ó,À´¸æÖªAppscanÔÙ´ÎɨÃè,¼´Ê¹ËüºÍURLÊDz»Ò»ÑùµÄÓòÏÂ.µãÒ»ÏÂÏÂÒ»²½ÔٴΡ£
Login Management(µÇ¼¹ÜÀí·½·¨)
ÔÚɨÃèµÄ»·½ÚÖУ¬ºÜÓпÉÄÜ»áÒ»²»Ð¡ÐÄÓöµ½³·³ö°´¼üÔì³ÉAppscanÏú»§.Òò¶ø,ÒªµÇ¼µ½Ó¦ÓóÌÐòÖÐ,´ó¼Ò±ØÐëÒÀ¾Ý´ËÌõÖеÄÉ趨¡£
#8205;#8205;Recorded(¼Í¼):#8205;#8205;ÌôÑ¡¸ÃÏîºó,»á¾³£³öÏÖÒ»¸öеĵçÄÔä¯ÀÀÆ÷£¬²¢ÊÔ×ÅÁ¬½Óµ½¹æ¶¨µÄÍøÖ·×öΪ±¾É¨ÃèµÄÆðÖ¹URL.ÄãÐèÒª¼üÈëÕË»§ºÍµÇ½ÃÜÂëµÇ¼µ½Ó¦ÓóÌÐò.ÄÇÑùÉ趨ÒÔºóÄã¿ÉÒԹرÕä¯ÀÀÆ÷£¬¿ÉÊDz»±ØµãÒ»ÏÂÈ¡Ïû°´¼ü.ÓÐʱÄã¾Í»á·¢ÏÖ¿ªÆôµÄµçÄÔä¯ÀÀÆ÷²¢²»ÊÇIE»òÊÇMozilla£¬·´¶øÊÇAppscanµçÄÔä¯ÀÀÆ÷.Äã¿ÉÒÔ¸ü¸Ä¸ù¾ÝÉ趨À´¸ü¸ÄÕâÒ».Tools--Options
--Advanced,É趨OpenIEBrowerµÄÖµ0--AppscanµçÄÔä¯ÀÀÆ÷,1--IE,2--Firefox,3--chrome.¼ÙÈç¸ÃÕ¾µãµÄ·½Ê½ÔÚ²»Ò»ÑùµÄä¯ÀÀÆ÷ϸ÷Óв»Í¬,ÕâÒ»É趨½«ÊÇÌرðÓÐЧµÄ.
#8205;#8205;Prompt(ÌáÐÑ):#8205;#8205;ÿһ´ÎÏú»§ÒÔºó,Appscan»áÌáÐÑÄãµÇ¼µ½Ó¦ÓóÌÐòÖÐ.¼ÙÈçÄã×¼±¸È«²¿É¨ÃèÄãµÄϵͳÈí¼þ£¬Äã¿ÉÒÔÌôÑ¡ÕâһѡÔñÏî.
#8205;#8205;Automatic(È«×Ô¶¯)£º#8205;#8205;ÔÚÕâ¶ùÄã¿ÉÒÔÁ¢¼´Ìض¨ÕË»§ÃÜÂë,Èç¹ûÄã±ØÐëµÇ¼µ½Ó¦ÓóÌÐòµÄÇé¿öÏÂ.
µãÒ»ÏÂÏÂÒ»²½ÔÙ´Î.
Test Policy
ÒÀ¾ÝÄãµÄ²âÊÔ¶Ô²ß,ÄãÐèÒªÌôÑ¡×îÊÊÓÃÓÚÄãÒªÇóµÄ¶Ô²ß,Ä¿Ç°µÄ¶Ô²ßÈ«ÊÇĬÈÏÉèÖõÄ,½öÔËÓúͻù´¡ÉèÖã¬ÈëÇÖÐԵģ¬ÏêϸµÄ£¬ÖØÒªµÄ¼«ÉÙÊýÕâЩ.ÔÚÆäÖдó¶àÊýÊÇÓ¦ÓÃÄ¿Ç°µÄ¶Ô²ß.¼ÙÈçÄãûÆÚ´ýÔڵǼʱÍÆËͲâÊÔºÍÏú»§ÍøÒ³Ò³Ã棬Äã¿ÉÒÔÌôÑ¡¸ÃÑ¡ÔñÏî¡£
µãÒ»ÏÂÏÂÒ»²½ÔÙ´Î.
Complete
ÕâÒ²ÊÇÖð½¥É¨ÃèµÄ×îºóÒ»²½.IBM Rational AppscanÈÝÐíÄãÌôÑ¡ÄãÔ¸ÒâµÄɨÃè·½·¨£¬¼´½øÐÐɨÃè,̽Ë÷ɨÃèµÈ.
#8205;#8205;Start a full automatic
sacn(Öð½¥Ò»¸öÍêÈ«µÄÈ«×Ô¶¯É¨Ãè):°éËæ×ÅÇ°±ß½¨Á¢µÄÅ䱸,Appscan½«Öð½¥Ì½Ë÷ºÍ²âÊÔ»·½Ú.
#8205;#8205;Start with automatic explore
only(Öð½¥Ì½Ë÷ɨÃè):#8205;#8205;AppscanÖ»ÄÜ̽Ë÷Ó¦ÓóÌÐò£¬µ«²»ÍÆËͽø¹¥.
#8205;#8205;Start with manual explore(Öð½¥ÊÖ¶¯Ê½Ì½Ë÷):#8205;#8205;·ÃÎÊ#8205;#8205;Æ÷½«±»¿ªÆô,Äã¿ÉÒÔÊÖ¶¯Ê½µçÄÔä¯ÀÀÆ÷Ó¦ÓóÌÐò.
Èç¹ûÄãÏë×÷³ö´óÁ¿µÄ±ä¸üɨÃèÅ䱸,Äã¿ÉÒÔÌôÑ¡×îºóÒ»¸öÑ¡ÔñÏîi will start scan later.
ÔÚ´ó¼ÒÖð½¥ÒÔÇ°,´ó¼ÒÓкÜÖØÒªµÄʶùÒª×ö,ËüÊÇAppscanµÄÐÄѪ¹ÜºÍÉúÃü-Full scan
Configuration(È«¾ÖÐÔɨÃèÅ䱸)¶Ô»°¿ò.ʹÎÒÃǸãÇå³þΪºÎËüÔÚɨÃèËæÒâÓ¦ÓóÌÐòµÄÇé¿öÏÂÄÇüN¹Ø¼ü.
Full Scan Configuration
ÔÚÏÂÃæµÄͼÖУ¬ÓÐËĸö¹Ø¼üµÄÒ»²¿·Ö--̽Ë÷£¬Á¬½Ó£¬²âÊÔºÍÒ»°ã£¬Ê¹ÎÒÃÇ¿´Ò»ÏÂʵ¼ÊµÄ¹Ø¼üµã£º
Explore
URL and Servers(URLºÍÍøÂç·þÎñÆ÷):ɨÃèµÄURLºÍ¸½¼ÓµÄÍøÂç·þÎñÆ÷Á¬½ÓµÄ½â¾ö.
Login
Management(µÇ¼¹ÜÀí·½·¨):³ý¿ªµÇ¼·½Ê½,¼ÙÈçÄãÒªÔÚAppscanÓë´ËͬʱµÇ¼£¬¸ù¾ÝÕâЩ¿ÉÒÔÌض¨.Õ⽫½µµÍ×ܵÄɨÃè•r¼ä.Ä㻹ÊÇ¿ÉÒÔÌض¨ÕýÔò±í´ïʽ¼ìÑéÏú»§Ò³.
Environment
Definition(×ÔÈ»»·¾³µÄ½ç¶¨):ÔÚÕâÀïÉèÏ£¬Äã¿ÉÒÔÌض¨µçÄÔ²Ù×÷ϵͳ,web·þÎñÆ÷,ÍøÕ¾Êý¾Ý¿â,¼°ÆäÆäËûµÚÈý·½²¿¼þ,Ëü¿ÉÒÔŽÍÖúÄãÌáÉýɨÃèµÄ¾«ÃܶȺÍÌØÐÔ¡£
Exclude Paths and
Files(Çå³ý;¾¶ºÍÎĵµ):É趨ɨÃèÈ«¹ý³ÌÖÐÅųöµÄÌØÊâ;¾¶,ÄËÖÁÊÇÏàÓ¦µÄÎĵµ,ÀýÈç.mps»ò.7zµÈ.Äã¿ÉÒÔÔÚÕâÀïÑ¡ÔñÏîϸù¾ÝÕýÔò±í´ïʽÀ´É趨.
Explore
Options(·ÃÎÊÑ¡ÔñÏî):³ÁÓà;¾¶Ñ¡ÔñÏîÓÐÀûÓÚÉ趨Appscan¶ÔÓÚͬÑù;¾¶µÄɨÃèƵ´ÎÏÞ¶¨¡£ÓÉÓÚÓÐʱºòAppscanºÜÓпÉÄÜ»á½øµ½Ò»¸ö²»¶ÏÑ»·Ò»´ÎÓÖÒ»´ÎɨÃèͬÑùµÄURL.
Parameters and Cookies(Ö÷Òª²ÎÊýºÍCookies):°üº¬Ïà¹ØÖ÷Òª²ÎÊýµÄÏêϸ×ÊÁϺÍÓ¦ÓóÌÐòÖоßÓеÄCOOKIES.
Automatic Form
Fill(È«×Ô¶¯±¨±íÌîºÃ):ÔÚɨÃèÈ«¹ý³ÌÖÐ,AppscanÅöµ½±ØÐë¼üÈëµÄ·½Ê½.±ÈÈ磬һ¸ö×¢²áÍøÒ³£¬ºÜÓпÉÄܱØÐë¼üÈëÖµ£¬ÀýÈçµÇ¼ÃûºÍÏêϸµØÖ·µÈ¡£¸ù¾ÝÌôÑ¡¸ÃÏî,¿ÉÒÔÈÃAppscanÈ«×Ô¶¯ÌîºÃÕâÖÖÐÅÏ¢ÄÚÈÝ.
Error pages(²»ÕýÈ·ÍøÒ³Ò³Ãæ):ÄãÔÚÕâÀïÅ䱸ϼüÈëµÄ²»ÕýÈ·ÍøÒ³Ò³Ã潫ÐÖúAppscan·Ö±æ²»ÕýÈ·ÍøÒ³Ò³Ãæ.
Multi-Step
Operations(¶àÁ÷³Ìʵ¼Ê²Ù×÷):ÓÐÒ»²¿·ÖÓ¦ÓóÌÐò,½öÓÐÈç¹ûÄãÒªÇóµÄÐÅÏ¢°´Ò»¶¨µÄ´ÎÐò²Å¿ÉÒÔ´ïµ½(ÀýÈçµç×ÓÉÌÎñÍøÕ¾).¸ù¾ÝÕâÒ»É趨Äã¿ÉÒÔµãÒ»ÏÂstart
recordingÀ´¼Í¼Æä±àÂëÐòÁÐ.
Glass box Scanning:Glass box
ScanningÊÇAppscanÒý½øµÄÒ»¸öеÄ×÷ÓÃ,´úÀíÉ̽«±»×é×°ÔÚÍøÂç·þÎñÆ÷ÉÏ,ÕâÓÐÀûÓÚɨÃèÑ°ÕÒÑڲصÄURlºÍÆäÓàµÄÎÊÌâ.
Communication and Proxy(ͨÐż°´úÀíÉÌ):Äã¿ÉÒÔÌض¨É¨ÃèÆ÷ÊDz»ÊÇ¿ÉÒÔÓ¦ÓÃieä¯ÀÀÆ÷µÄÍøÂçÉèÖÃ(»ò²»¿ÉÒÔÓ¦ÓÃÒ»ÇдúÀíÉÌ)¡£
HTTP Authentication(HTTPÉí·ÝÈÏÖ¤):Ó¦Óÿͻ§¶ËÖ¤Êé,Ìá½»×ʸñÖ¤ÊéÎĵµºÍÃܳ×Îĵµ.
Test Policy(²âÊÔ¶Ô²ß):È«²¿µÄ²âÊÔÃû×Ö¶¼ÁÐÔÚÕâ¸öÒ»²¿·Ö,¼ÙÈçÄã²»Ô¸AppscanɨÃèÌØÊâµÄϵͳ©¶´£¬Äã¿ÉÒÔ³·ÏûÔÚÆäÖеÄÈÎÒâÒ»¸ö.
Test
Options(²âÊÔÑ¡ÔñÏî):ÕâÒ»Ò»²¿·ÖÄã¿ÉÒÔÌôÑ¡ºÏÊʵIJâÊÔÑ¡ÔñÏî.AppscanÍÆËͺܶàµÄ²âÊÔ£¬±ØÐëºÄ·ÑºÜ¶àµÄ•r¼ä.¿ÉÊÇÌôÑ¡ÊÊÐÔ²âÊÔ,Appscan»áÊÔ×ÅÍÆËÍ,ÒÔÃ÷È·ÊǺÏÀíµÄ²âÊÔ.Ëü¿ÉÒÔ¼ì²éµ½ÍøÂç·þÎñÆ÷ÊÇiis,ËæºóÖ»ÍÆËÍÔÚÆäÖжÔÓÚIISµÄÒ×ËðÐÔ¼ìÑé²âÊÔ,¶ø²»ÈÝÒײéÑéÆäËûÍøÂç·þÎñÆ÷Ïà¹ØµÄÎÊÌâ.
Privilege Escalation(ȨÀû¸üÐÂ):Äã¿ÉÒÔÌá½»²»Ò»Ñù¹ÜÀíȨÏÞµÄÏû·ÑÕß»òû¾ÈÏÖ¤µÄ¿Í»§É¨ÃèµÄɨÃèÎĵµ¡£
Scan Expert(ɨÃèȨÍþר¼Ò):ɨÃèȨÍþר¼ÒÃ÷È·Ìá³öÁËÌáÒ飬ÒÔ¸ü¿ìµÄɨÃèÓ¦ÓóÌÐò¡£
µãÒ»ÏÂOK£¬½«»Øµ½ÆðµãµÄɨÃèÖ¸µ¼¶Ô»°¿ò.ÌôÑ¡start a full automatic
sacn,µã»÷finish¡£½øÐÐÅ䱸ȫ¹ý³Ì£¬Öð½¥AppscanɨÃè.ÏÂһƪÎÄÕÂÖУ¬´ó¼Ò½«ÌÖÂÛÏà¹ØAppscanɨÃè½Y¹ûÆÊÎö.
¶àÌØÊÖÓÎרÌâΪÄúÌṩÃλÃÊÖÓÎË¢½ð±Ò©¶´,ÃλÃÊÖÓÎתÒÆ100Íò½ð±Ò¡£°²×¿Æ»¹û°æÒ»Ó¦¾ãÈ«,ÕÒ¾µäÊÖÓξÍÀ´¶àÌØÊÖ»úÓÎϷƵµÀÏÂÔØ!
Òƶ¯É¨ÃèÒÇÈí¼þÊÇÒ»ÖÖÓëɨÃèÒÇÏ൱µÄÊÖ»úÈí¼þ¡£ÓÐʱÐèÒª½«Ö½ÖÊÎĵµÉ¨Ãèµ½Îļþ¼ÐÖУ¬µ«ÊÇÈç¹û¸½½üûÓÐɨÃèÒÇÄØ£¿ÐÒÔ˵ÄÊÇ£¬ÄúÏÖÔÚ¿ÉÒÔʹÓÃÊÖ»úʹÓÃÕÕƬɨÃèÈí¼þÓ¦ÓóÌÐòɨÃèÎĵµ£¬ËùÒÔÄúµÄºÃÓѱØÐëÏëÖªµÀÄÄÖÖÓ¦ÓóÌÐòɨÃèÒÇÊǺõģ¿É¨ÃèÓ¦ÓÃÅÅÃû³Ï¿ÒÍƼö¸øÄú£¬ÕâЩɨÃèÈí¼þ¿ÉÒÔɨÃèÎļþ£¬Äú¿ÉÒÔ±£´æÔÚÄúµÄÊÖ»úͼƬ»òPDF¸ñʽ£¬Ê¹ÄúµÄÊÖ»ú¿ÉÒÔ³ÉΪ±ãЯʽɨÃèÒÇ¡£¶àÌØÊÖÓÎרÌâΪÄúÌṩɨÃèÈí¼þ,ºÚÍ«Æƽâ°æÉãÏñͷɨÃèÈí¼þ¡£°²×¿Æ»¹û°æÈí¼þappÒ»Ó¦¾ãÈ«¡£
©¶´É¨Ã蹤¾ßµÄÖ÷Òª¹¦ÄÜÊÇͨ¹ý¿ª·¢¶Ô±¾µØ¼ÆËã»ú½øÐÐɨÃ裬ͨ¹ý©¶´É¨Ã蹤¾ßÆÀ¹À¼ÆËã»úµÄ½¡¿µ×´¿ö£¬·ÖÎö¼ÆËã»úÖÐÊÇ·ñ´æÔÚ°²È«Â©¶´¡£ÔÚÐí¶àÇé¿öÏ£¬ÎÒÃÇÔÚ©¶´É¨Ãè¹ý³ÌÖÐʹÓ鶴ɨÃ蹤¾ß£¬Í¨¹ýϵͳ²»¶Ï¸üкÍÐÞ¸´Â©¶´£¬Ìá¸ß¼ÆËã»ú°²È«ÐÔ¡£ÏÂÃæµÄ°æ±¾ÎªÄúÕûÀíÁËһЩ©¶´É¨Ã蹤¾ß¡£ÓÐÐèÒªµÄÅóÓÑ¿ÉÒÔÏÂÔز¢Ê¹ÓÃËüÃÇ¡£¶àÌØÈí¼þרÌâΪÄúÌṩ©¶´É¨Ã蹤¾ß,¹«Ë¾Â©¶´É¨Ã蹤¾ß,°²×¿Â©¶´É¨Ã蹤¾ß¡£¶àÌØÈí¼þÕ¾Ö»ÌṩÂÌÉ«¡¢ÎÞ¶¾¡¢ÎÞ²å¼þ¡¢ÎÞľÂíµÄ´¿ÂÌÉ«Èí¼þÏÂÔØ¡£
¶àÌØÈí¼þרÌâΪÄúÌṩɨÃ蹤¾ß,ɨÃ蹤¾ßapp,ÊÖ»úɨÃ蹤¾ß;°²×¿Æ»¹û°æÈí¼þappÒ»Ó¦¾ãÈ«¡£¶àÌØÈí¼þÕ¾Ö»ÌṩÂÌÉ«¡¢ÎÞ¶¾¡¢ÎÞ²å¼þ¡¢ÎÞľÂíµÄ´¿ÂÌÉ«¹¤¾ßÏÂÔØ
¶àÌØÈí¼þרÌâΪÄúÌṩ©¶´¼ì²â,·þÎñÆ÷©¶´¼ì²â,app©¶´¼ì²â¹¤¾ß;°²×¿Æ»¹û°æÈí¼þappÒ»Ó¦¾ãÈ«¡£¶àÌØÈí¼þÕ¾Ö»ÌṩÂÌÉ«¡¢ÎÞ¶¾¡¢ÎÞ²å¼þ¡¢ÎÞľÂíµÄ´¿ÂÌÉ«¹¤¾ßÏÂÔØ