Record traffic and actions to use in an AppScan Dynamic Analysis scan

Latest Version

Version
2.0.0
Update
June 27, 2024
Size
102KiB
Developer
Category
Users
3,000+
Rating
4.8 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
Storage
UnlimitedStorage
Scripting
ActiveTab
Tabs
Debugger
Downloads
Cookies
See more

AppScan Activity Recorder Extension

AppScan Activity Recorder simplifies web application security testing. It allows you to capture manual crawl, login, and multi-step data (traffic and actions) for an AppScan Dynamic Analysis scan.

Usage Instructions:
• Open a website to record its browsing activity in the Chrome browser.
• On the address bar, click the AppScan Activity Recorder extension icon to start recording the browsing activity.
• The AppScan extension icon blinks indicating progress in recording the activity.
• Tip: The extension icon’s tooltip displays the domain URL being recorded. This is particularly useful when you are accessing different sites in the same Chrome browser instance.
• Perform the browsing activity.
• Click the AppScan extension icon to stop recording.
Or
• Click Cancel in the chrome debugging message dialog box to stop recording.
• The browser prompts you to save the recording in *.dast.config file format.

Options page:
Access the options page by right-clicking the extension icon in the toolbar and then selecting options. Or navigate to the options page by, first, opening chrome://extensions, locating the \"AppScan Activity Recorder\" extension, clicking Details, and then selecting the \"Extension options\" link.
• Open debugger window: This option shows the user activity in a separate window.
• Enable encryption: This option allows encryption of the recording to prevent exposure of recorded information.
Note: Encrypted recorded files will be supported in HCL AppScan Enterprise version 10.4.0 and above and HCL AppScan on Cloud. Any HCL AppScan Integrations as for e.g. HCL AppScan Jenkins and HCL AppScan Azure DevOps Plugins, which integrate with HCL AppScan Enterprise and HCL AppScan on Cloud will also support encrypted recorded files for DAST Scans execution.

Changelog:
• 2.0.0 - Migrated from Manifest V2 to Manifest V3
• 1.1.0 - Support to encrypt recorded files.
\t- Bug fixes.
• 1.0.10 - Updated AppScan icons.
• 1.0.9 - Support for adding browser version and debug option to recorded traffic file.
\t- Bug Fixes related to GPO support.
• 1.0.8 - Support for \"runtime_blocked_hosts\" Extension settings GPO policy to validate the URL to record traffic. Follow instructions in “Set Chrome app and extension policies (Windows)” in this link: https://support.google.com/chrome/a/answer/7532015 to set \"runtime_blocked_hosts\" Extension settings GPO policy in Chrome Browser. Follow instructions in “Configure Microsoft Edge policy settings on Windows” in this link: https://docs.microsoft.com/en-us/deployedge/configure-microsoft-edge to set \"runtime_blocked_hosts\" Extension settings GPO policy in Edge Browser.
\t- Capture AppScan Activity Recorder version info in recorded traffic file.
• 1.0.7 - Fixed a bug to resolve issues wherein partial headers and HTML response were being captured in recorded traffic files.
• 1.0.6 - Support for the new Edge version released on January 15th, 2020 and downloadable from \"https://support.microsoft.com/en-in/help/4501095/download-the-new-microsoft-edge-based-on-chromium\". Follow instructions in “To add an extension to Microsoft Edge from the Chrome Web Store” in this link: \"https://support.microsoft.com/en-us/help/4538971/microsoft-edge-add-or-remove-extensions\" to install AppScan Activity Recorder extension in Edge.
• 1.0.4 - Support to start recording from a blank URL.
• 1.0.3 - Support for log window to record cookies, actions and the requests being hit.
• 1.0.0 - First release

NOTES:
• This extension will record browser traffic that includes request/response and user actions. Scope of recording is only for the current “active” tab where the extension is invoked. No activity is recorded for other tabs even if the user switches to those.
• Before starting the recording, it is recommended to logout from the site; disable auto-sign in/ auto-fill from Chrome settings to enable this extension to record all Browser tab activity.
• Analysis of recordings from websites using HTTP/2 is not currently supported by AppScan.
• From Chrome Version 84.0.4147.105 (Official Build) (64-bit) released on July 28th, 2020, you will see the info banner lingering even after the recording is stopped explicitly via the AppScan Activity Recorder icon. Please note this will not hamper the saved recording or the extension functionality in any way. The Chrome WebStore Dev Support team has confirmed this as an intentional change. Please click on “Cancel” to dismiss the banner.
• In normal mode (without debug enabled), the system tray window displays recording information only.
• For recording to continue, please leave the system tray window open. When finished, click \"Cancel\" or \"Finish Recording\".
• This version (v2.0.0) of the extension currently does not support GPO policy. If feasible, this feature will be included in the next release.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "AppScan Activity Recorder", "description": "Record traffic and actions to use in an AppScan Dynamic Analysis scan", "version": "2.0.0", "background": { "service_worker": "js/serviceWorker.js" }, "options_page": "options.html", "icons": { "16": "./images/appscan16.png", "32": "./images/appscan32.png", "64": "./images/appscan64.png", "128": "./images/appscan128.png" }, "action": { "default_icon": "images/appscan128.png" }, "permissions": [ "storage", "unlimitedStorage", "scripting", "activeTab", "tabs", "debugger", "downloads", "cookies" ], "content_scripts": [{ "matches": [ "" ], "js": [ "js/domEvent.js", "js/collectDomElementData.js", "js/appScanBrowserAction.js" ] }], "host_permissions": [ "*://*/*" ]}
Read more

How to download and manually install AppScan Activity Recorder extension for Chrome

Looking for a way to install AppScan Activity Recorder extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install AppScan Activity Recorder extensions manually, this article outlines two simple methods to effortlessly install AppScan Activity Recorder extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download AppScan Activity Recorder extension and manually install through Drag &Drop

If you ever need to manually install a AppScan Activity Recorder extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the AppScan Activity Recorder Extension by clicking the "Download CRX" button on the website.

Look for the AppScan Activity Recorder extension you wish to install. Go to the website and download the AppScan Activity Recorder extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for AppScan Activity Recorder extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the AppScan Activity Recorder extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download AppScan Activity Recorder extension for Chrome and install in Developer Mode

This is another method to install AppScan Activity Recorder extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the AppScan Activity Recorder extension file

Select and download the AppScan Activity Recorder extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the AppScan Activity Recorder extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your AppScan Activity Recorder extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the AppScan Activity Recorder extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install AppScan Activity Recorder extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

OWASP Penetration Testing Kit Extension · Developer Tools 3,000+ 43 ★ 7.14MiB

icon

Input hidden Monitor Extension · Developer Tools 3,000+ 0 ★ 36.05KiB

icon

Burp Suite Navigation Recorder Extension · Developer Tools 3,000+ 3 ★ 279KiB

icon

IP, DNS & Security Tools | HackerTarget.com Extension · Developer Tools 3,000+ 31 ★ 94.76KiB

icon

Detectify Recorder Extension · Developer Tools 3,000+ 3 ★ 339KiB

icon

Hack-Tools Extension · Developer Tools 3,000+ 27 ★ 1.61MiB

icon

Scripter debugger extension Extension · Developer Tools 3,000+ 2 ★ 1.04MiB

icon

Tenable.io Web Application Scanning Extension · Developer Tools 3,000+ 3 ★ 7.2MiB

icon

Carbon Devtools V10 Extension · Developer Tools 3,000+ 1 ★ 279KiB

icon

Cyber Web Tools Extension · Developer Tools 3,000+ 6 ★ 340KiB

icon

IBM Equal Access Accessibility Checker Extension · Developer Tools 3,000+ 16 ★ 29.19MiB

icon

retire.js Extension · Developer Tools 3,000+ 9 ★ 132KiB

icon

Android Developer Toolbox Extension · Developer Tools 3,000+ 5 ★ 1.79MiB

icon

Qualys Browser Recorder Extension · Developer Tools 3,000+ 8 ★ 1.14MiB

icon

Vulners Web Scanner Extension · Productivity 3,000+ 20 ★ 534KiB

icon

CodeWing - GitHub code navigation Extension · Developer Tools 3,000+ 3 ★ 166KiB

icon

Developer's Download Helper Extension · Developer Tools 3,000+ 5 ★ 156KiB

icon

XHR JSON Panel Extension · Developer Tools 3,000+ 18 ★ 45.82KiB

icon

Dev Playground Extension · Developer Tools 3,000+ 2 ★ 288KiB

icon

Admin tools Extension · Developer Tools 3,000+ 1 ★ 62.79KiB

icon

Advanced Dev Tools Extension · Developer Tools 3,000+ 1 ★ 891KiB

icon

d3coder Extension · Developer Tools 3,000+ 37 ★ 108KiB

icon

HackBar Extension · Developer Tools 3,000+ 52 ★ 1.56MiB

icon

Rapid7 AppSec Plugin Extension · Developer Tools 3,000+ 3 ★ 23.55MiB

User reviews

icon

Eliane Cristina Klein (ID: 00000025965a64e6) Voted 5 ★ - Updated 10/18/2019 gostei viz um video como abaixar esse app gostei bastante

icon

Michael Barone (ID: 0000003f3e1c976a) Voted 4 ★ - Updated 02/18/2019 This extension would be even better if it could start automatically on opening chrome!