Re: [mod-security-users] web app discovery

[Tom A. <tan...@oa...>]

kiran k wrote:
> Are there any tools which discovers web application from an input URL.
>  
> I am looking for a tool which crawls recursively and finds the forms, 
> form fields, server scripts, cookies and hidden fileds. Based on this 
> information I would like to develop policies. If I have this data in xml 
> it would be even better.
>  
>  Any quick starting point would be greatly appreciated, if no tools 
> exists. How about any commercial libraries ?

You could look at Firefox's "DOM Inspector".  I think it will handle 
Javascript and such.  I don't think it will recursively crawl a site, 
but it's open-source, so you could just pull the parser and write your 
own crawler portion or lift it from a robot.

Tom