ncorl (Community Member) asked a question.
Hello, I'm extremely new to this tool and while making some good progress on it, I'm a little stuck.
I'm working on setting up a dynamic scan for a web application built upon PEGA. My goal has been to scan 5 particular parts of the application to ensure no vulnerabilities are made on pages that pull data. To do that, I made 5 different crawl scripts to scan those 5 parts of the application. So far, I've been successful in doing so. However, when it came to linking each of these scans to an application, I'm thrown an error saying that it cannot export the data. To my understanding, it seems I can only link one Dynamic scan to a particular application. Given I have 5 different scans needed on one application that becomes a problem.
As an attempt to remedy this I tried to set up 5 URLs (Same URL) on the same scan but with a different crawl script. However, due to the fact that they are the same URL (The login page) I cannot add all 5 of them into one scan. I've also considered creating one long crawl script that reached each part of the application but I am not sure if it scans pages it is crawling through or the page it ends at. In fact, besides looking at the warnings, I have a hard time seeing what it is scanning in general.
Any recommendations on what I can do in this situation?
.png){kind=logo}
So a bit of an update. From what I could gather, the only thing I could do was create 5 different applications and link a scan to each one of them. I think I no longer need any advice.
Hello @ncorl (Community Member) ,
I can also suggest that you put all the crawl scripts into one scan, making each one a "test" in selenium, and then have one crawl script (Selenium calls it a suite) with 5 tests. See if that alternative idea works.
Jason
Veracode Support Engineer
@ncorl (Community Member) Thanks for the question. As per @Jason M., Veracode Support (Veracode) answer, you can group Seleniums into a test suite, this will help address the is grouping of scripts. In regards to your second point about understanding what the has been scanned, we are releasing a new featured called the Coverage report which will provide greater transparency into how the scanner has performed and what links were assessed.