Difference among 1) active scan all in scope 2)Active scan site 3)spider all in scope and in site

[Tanu Mukherjee]

Hi,

I have used Zap tool and currently have few doubts regarding some functionalities.
First, Whats the difference between active scan all in scope, scan site, spider all in scope and spider site. I am able to create the tree of the webservices testing that I have done but I dont know whether to attack it in active scan mode or spider mode.

Secondly, after scanning (with active scan and spider mode as well), the report that is generated is different or same?.(for active scan and spider)

[Simon Bennetts]

Hi Tanu,

Have a look at the Getting Started Guide to understand the difference between spidering and active scanning.
The is some information about scope in the user guide, which is included with ZAP and also online: https://code.google.com/p/zaproxy/wiki/HelpStartConceptsScope
You should only scan/spider "in scope" if you have defined some contexts, otherwise nothing will be in scope and the scans will not do anything.
I think of the 'in scope' operations as being more useful when using ZAP manually, but others may disagree :)

You will typically want to explore you application first, either manually or using the spider.
A report generated at this point will just include alerts found by passive scanning.
You will then probably want to use the active scanner, after which the report will also contain alerts that the active scanner finds.

Does that make sense?

Simon

[Basu Hunasikatti]