Re: spidering of webapps

["david lodge" <resident.deity () gmail com>]

> you can use a web proxy such as paros or burp.

One thing I noticed on a recent test: many of the automated spider
tools only examine HTML; <A HREF>s; if the website you're assessing
uses something freaky like javascript doing:
location.href="/newpage.html", or using flash ad nauseam then the
spider may not find it.

So make sure you manually browse the site first to give the proxy lots
of starting points ere you start the spider.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------