Macro Recorder is a tool to manage "Web Macros" within N-Stalker Web Application Security Scanner.
"Web Macro" is a user-provided navigation script that is usually recorded using a web browser and a web proxy tool. Macro Recorder allows you to insert manual URLs as well and you must choose between an authentication or navigation macro. To better understand the differences, see comparison table:
Authentication Macro
|
An authentication Web Macro is used to authenticate N-Stalker's against Web Forms or any other of user interaction based authentication.
As applications provide both a mean to login and logoff, Authentication Macros have a "logout detection" control that can be configured to prevent accidental logoff.
These macros can use any URLs and will not be prevented from calling external services within N-Stalker's spider engine.
|
Navigation Macro
|
A navigation Web Macro is used to provide a specific path within the application to be followed by N-Stalker's spider engine.
As they are treated in the same level of spider's retrieved resources, navigation will only be permitted within the application's boundaries (its own URL and allowed hosts). Thus we do not recommend using them for authentication purposes.
|
To open "Macro Recorder" tool, click on "Macro Recorder" button in N-Stalker's top menu:
Choose from the options below:
|