?????????????????????????????????а??????????????????????????????????????????????????У????????IBM AppScan???????8.0?沢??????
????What's IBM AppScan? It's a famous test tool for security test.
????Wha's security test? Security Test focuses on security issues of a web site/web service.
???????????????????????о?????????????????????????????????????----??????????????????????????????????飬?????????????????/????/???????????????????????????
?????????????????????????????/??Ρ????????????????????????????棬??????????????????????????????д??????????????д....
?????????????????IBM AppScan???????????????????????????????????????????????ù????????úú??????????????￡?
???????????Щ??????????
????1. ??Session?????????????????????????治??????????Web.config?? stateNetworkTimeout="14400"??
????2. ????淵?????????????????????????Appscan???????????????????????????Web.config??<customErrors mode="Off"/>??
????3. ??????????????????????????Appscan??????????Web.Config??compilation debug="false"??
????4. ???????????????????????????Appscan?????????????Logon??????????
????5. ????????????????????“???”????????????????Logon??????????
????6. ?????????? Session["userName"] = "admin";??????????????????????????????????????
??????????ЩAppScan??????
????7. ?????????????“???”??????????UI??????????????
????8. ?????????????????????????????????AppScan?????
????9. ???汨???????????????????????????????????30???????????????????????????“??????????????κ??????”??“???????”??
????10. ??????????????iFrame??????????AppScan?????????????е???棬???????????“??????”????????????????????Σ?AppScan??????
????11. ??β?????????????????????????????????????????о???????????
????12. ?????????“??????”?????Щ??????????????????????full scan???
????????????????????????????????????????????????????:??