How does the spider work?

Lucas Sacramento

unread,

Apr 10, 2024, 9:34:24 AMApr 10

to ZAP User Group

I have a question about the spider. I don't exactly understand how it works. For example, if I have an application and I run a spider authenticated, if I don't remove the logout URL, will the spider find it and ignore it? I am asking because when the spider builds a tree, if it finds a logout URL, does it not continue building the tree for elements that are authenticated?

kingthorin+zap

unread,

Apr 10, 2024, 10:10:33 AMApr 10

to ZAP User Group

It would find it and use it. But should then notice it is in a loggged out state and re-auth. (Assuming you have auth setup well.)

Lucas Sacramento

unread,

Apr 10, 2024, 11:27:25 PMApr 10

to ZAP User Group

Regarding the output visible in the GUI, can I access it via an API or another method? I'm creating a module that modifies these elements and tests different combinations to establish context. This output is crucial for me to verify if the context is correct.

Simon Bennetts

unread,

Apr 16, 2024, 9:00:25 AMApr 16

to ZAP User Group

Yes, the API allows you access to nearly everything in the desktop.

Cheers,

Simon

Reply all

Reply to author

Forward