Dynamic Analysis Group (Archived) — PBetley175101 (Community Member) asked a question.
Link Multiple URLs to an application
I have an app I want to have run as a dynamic scan. I set it up with 2 URLs, one for admins and one for users: https://example.com and https://example.com/admin. Each has its own unique login credentials.
If I have a dynamic scan set up like this, how can I have both URLs point to the same application? It's the same codebase, just two different sets of credentials as the reason for the distinct URLs
.png){kind=logo}
Hi @PBetley175101 (Community Member),
Authentication details specific for each URL can be configured by following the documentation here: https://help.veracode.com/reader/OZJ0LCrqCUqbxFvNFcJnWQ/MiYThLqe2M0~mr9GqEHFLA.
The platform will analyse the application twice, each time from the perspective of the authenticated user, as well as from an unauthenticated perspective. The platform has no notion of the underlying codebase as it is not operating at a source or binary level when performing a dynamic analysis.
It should be noted that caution should be exercised when testing administrative accounts especially in production environments. Due to the nature of the scanner, it may pollute data due to input fuzzing or it may perform unwanted actions such as disabling user accounts etc.
I hope that answers your question, but if not please do get in touch. Alternatively if you have any ideas for feature requests you may wish to visit https://community.veracode.com/s/ideas.
Thanks,
Anthony Fielding