IBM Rational AppScan (vulnerability scanning tool)

IBM Rational AppScan is the industry's leading web application security detection tool, providing scanning, reporting and repair recommendations. IBM Rational AppScan is a leading web application security testing tool that was once known in the industry as Watchfire AppScan. Rational AppScan can automate the security vulnerability assessment of web applications and can scan and detect all common web application security vulnerabilities, such as SQL injection (SQL-injection), cross-site scripting (cross-site scripting), and buffer overflow (buffer overflow). overflow) and the latest Flash/Flex applications and Web 2.0 application exposure and other security vulnerability scanning.

Basic introduction

Scanning is the process in which Rational AppScan tests the site to discover security vulnerabilities. First, it performs an Explore process on the site (which behaves similar to a web crawler). It starts from a certain starting URL and continues to explore through the links between pages until the site All pages have been visited or reached a certain set maximum.

While you're exploring, AppScan analyzes each discovered page and determines whether it needs to be tested. If necessary, AppScan will create test cases for it based on the set test strategy (the test strategy is described in detail in the following chapters). The number of test cases is determined by the rule set included in the test strategy. After Explore is completed, AppScan will test the site based on the test cases and analyze the site's response information to find security flaws.

AppScan introduces the concept of scan project to manage security scans. Through scan project, users can configure various parameters, save scan results, etc.

How to use

How to use AppScan8.0:

1. Copy the patch.exe file to the APPSCAN installation directory and run it.

2. Run keygen.exe to generate l

ince.lic file.

3. Open APPSCAN, go to Help->License->Load the old format (.lic) license, and load the .lic file just generated.