Skip to content

Commit 261325e

Browse files
authored
Wavsep scan tweaks (#249)
Set tech, active scan config and change the path traversal strength. Signed-off-by: Simon Bennetts <psiinon@gmail.com>
1 parent 7f2a02d commit 261325e

File tree

1 file changed

+27
-2
lines changed

1 file changed

+27
-2
lines changed

scans/wavsep/wavsep.yaml

Lines changed: 27 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,9 @@ env:
1414
pollPostData: ""
1515
sessionManagement:
1616
method: cookie
17-
technology: {}
17+
technology:
18+
exclude:
19+
- Windows
1820
structure: {}
1921
parameters: {}
2022
jobs:
@@ -24,6 +26,29 @@ jobs:
2426
action: add
2527
type: standalone
2628
file: /zap/wrk/wavsep-score.js
29+
- type: activeScan-config
30+
parameters: {}
31+
inputVectors:
32+
urlQueryStringAndDataDrivenNodes:
33+
enabled: true
34+
addParam: true
35+
odata: true
36+
postData:
37+
enabled: true
38+
multiPartFormData: true
39+
xml: true
40+
json:
41+
enabled: true
42+
scanNullValues: true
43+
googleWebToolkit: true
44+
directWebRemoting: true
45+
urlPath: true
46+
httpHeaders:
47+
enabled: true
48+
allRequests: true
49+
cookieData:
50+
enabled: true
51+
scripts: true
2752
- name: spider active
2853
type: spider
2954
parameters:
@@ -51,7 +76,7 @@ jobs:
5176
- name: Path Traversal
5277
id: 6
5378
threshold: medium
54-
strength: high
79+
strength: insane
5580
- name: activeScan DOM XSS
5681
type: activeScan
5782
parameters:

0 commit comments

Comments
 (0)