Can GWT application work on Web UI with autologin plugin?

raymond.lee's Avatar

raymond.lee

22 Jun, 2016 02:17 AM

I try to run the scanner against GWT JavaScript authenticated application on Web User Interface, not through command line. There is no form and the username and password attributes when viewing the source code of the login page. My question is does Arachni support the GWT login application? I got the error and how can I verify if the login authentication is successful?

Thanks!!

  1. Support Staff 1 Posted by Tasos Laskos on 22 Jun, 2016 07:17 PM

    Tasos Laskos's Avatar

    You probably need to get the names with Firebug or something similar, so that you can see the evaluated DOM and hence the form's inputs.

  2. 2 Posted by raymond.lee on 23 Jun, 2016 02:43 AM

    raymond.lee's Avatar

    Yes when I view source I cannot see the form. But even I can use Firebug to get the DOM, then how does it help the scanner login authentication? Do you think Arachni is able to support GWT application?

  3. Support Staff 3 Posted by Tasos Laskos on 23 Jun, 2016 06:34 AM

    Tasos Laskos's Avatar

    It should, I haven't heard of any issues with GWT before.

    "View source" works different from debugging tools like Firebug, it'll just show you the HTTP response, which won't include the form if it's created dynamically via JS.

  4. Tasos Laskos closed this discussion on 03 Aug, 2016 02:22 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac