WEB APPLICATION SCAN UTILIZING MULTIPLE AUTHENTICATION TYPES BASED ON A SET OF USER CREDENTIALS

Abstract

In an embodiment, a component of a web application scanner for scanning of a web application obtains a set of user credentials during a scan configuration session, the set of user credentials associated with a plurality of authentication types, and generates a first configuration associated with a first authentication type of the plurality of authentication types based on the set of user credentials. The component performs a first attempt to authenticate the web application scanner with the web application based on the first configuration. The component automatically and selectively performs a second attempt to authenticate the web application scanner using the set of credentials via a different authentication type based on whether the first attempt is verified as successful.

CPC Classifications