forked from kaakaww/javaspringvulny
-
Notifications
You must be signed in to change notification settings - Fork 0
/
stackhawk.yml
37 lines (36 loc) · 921 Bytes
/
stackhawk.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
app:
applicationId: ${APP_ID:dacc7d3e-babc-47d2-b040-ab117ab04526}
env: ${APP_ENV:dev}
host: ${APP_HOST:https://localhost:9000}
waitForAppTarget:
path: /
waitTimeoutMillis: 200000
pollDelay: 6000
excludePaths:
- "/logout"
# - "/login-form-multi"
# - "/login-code"
antiCsrfParam: "_csrf"
authentication:
loggedInIndicator: "\\QSign Out\\E"
loggedOutIndicator: ".*Location:.*/login.*"
usernamePassword:
type: FORM
loginPath: /login
loginPagePath: /login
usernameField: username
passwordField: password
scanUsername: "user"
scanPassword: "password"
cookieAuthorization:
cookieNames:
- "JSESSIONID"
testPath:
path: /search
success: "HTTP.*200.*"
hawk:
spider:
maxDurationMinutes: 5
# config:
# - "scanner.analyser.redirectEqualsNotFound=false"
# - "scanner.analyser.followRedirect=true"