Rapid7 AppSec plugin

The Rapid7 AppSec plugin works with Rapid7 InsightAppSec and AppSpider dynamic application security testing solutions to improve application scanning coverage and assist in validating vulnerabilities with these capabilities:

Macro Recording – Use the plugin to record macros required by InsightAppSec and AppSpider Enterprise when selecting the Macro Authentication scan configuration. Macro Authentication enables the crawling engine of InsightAppSec and AppSpider to authenticate with complex login workflows.

Vulnerability Validator – Use the vulnerability validator in conjunction with the Attack Replay feature in InsightAppSec and AppSpider. This feature of the Chrome plugin enables users to replay and edit recorded traffic generated during an InsightAppSec or AppSpider scan.

Bootstrap Authentication – The Chrome plugin is required to use AppSpider Enterprise’s Bootstrap Authentication feature, which gives the user the ability to interactively login to the target application during an active scan. Used for login workflows that require human interaction for example 2FA (Two-factor authentication).

Traffic Recorder – Record the interactions (like HTTP GET and POST requests) between the front end application and the back end server in a Traffic File. InsightAppSec can replay these interactions to authenticate into your application.

For support related to this plugin, please contact [email protected]