Identities

Identities and Macros

Identities store credential sets for the Vega automated scanner:

• HTTP Basic/Digest
• NTLM
• Form-based authentication (via Macros, see below)

Creating Identities

To create an identity, click on the Identity icon in the lower right part of the scanner perspective.

Creating identities representing HTTP Basic, HTTP Digest, and NTLM credentials is straightforward.

Macros

Macros are stored requests representing client login sequences. Vega allows for the user to replay a login request made recorded by the proxy prior to an automated scan. This permits the automated scanner to authenticate itself to the application.

1. Log into to the application through the proxy

2. Create a new identity

3. Click Create macro

4. Click Add item and find the POST request for your login through the proxy

5. Highlight the item and click finish

6. Finish creating the identity, now bound to the macro you just created

7. You may now perform an authenticated automated scan (don't forget to exclude the application logout link..)