Mastering Kali Linux for Web Penetration Testing

Browser clusters

All of these scans and tests are conducted as if the Instances are actually browser sessions interacting with the web application and user. We can actually modify the browser's emulated behavior, time limits, size, and even the number of independent browsers in use in the Browser Cluster section. For quick scans, I advise checking the box that allows the scanner to omit images.

Session checking is also a potentially valuable capability, and its options are shown in figure following. There is nothing worse than scanning an application just to find out that the logic behind that application has shunted your sessions, scans, or traffic to a linked domain outside the target's control. We can enter confirmation pages here to ensure ...