DAST Scans

Introduction

Dynamic application security testing (DAST) is a process of testing an operating application or software product in order to identify potential security vulnerabilities and architectural weaknesses.

This guide details how to initiate and complete a DAST scan on the platform.

Prerequisites:

1. You should be signed in with CloudDefense.ai. If not, please refer to our guide on creating a CloudDefense.ai account.
   

2. Access to the website URL for which you want a DAST scan.

Step 1: Navigation to DAST 

• Click on  “Applications” on Navbar. 

 

• Click the green “SCAN” button on the left side of the page, and choose “Other” to   proceed.  

• After clicking on “Other” select  “DAST” 

Step 2: 

Now you can run a simple scan by just providing Resource URL

If you want more control over your scanning configuration and features then you can use “Advanced options” 

1. Resource URL - Provide target address, example: https://console.clouddefenseai.com 

2. Add Authentication 

• Add Key

• Add Value

3. Add cURL

4. Submit field - Name of Submit field which needs to be clicked automatically

DAST Scan from CLI

1. Install cdefense CLI in your Device using these steps -    https://github.com/CloudDefenseAI/cd#installation   

2. Now run below command to run DAST Scan from CLI

export SCAN_URL= https://console.clouddefenseai.com/

cdefense  dast --api-key=602368f0-f3ba-4696-ab76-cb7e1c232e32 --url=http://testphp.vulnweb.com/