Kali Linux Web Penetration Testing Cookbook - Second Edition

There's more

Spidering is a mostly automated process where spiders do very little or no checking on the links they are following. In applications with flawed authorization controls or exposed sensitive links and forms, this could cause the spider to send a request to an action or page that performs a sensitive task that could damage the application or its data. Hence, it is very important that spidering is done with extreme care, taking advantage of all the exclusion/inclusion filtering features the tool of choice provides, ensuring that there is no sensitive information or high-risk tasks within the spider scope, and preferably as a last resort to browsing manually through the site.