English
See more
Record traffic and actions to use in an AppScan Dynamic Analysis scan
Latest Version
Version
2.0.0
Update
June 27, 2024
Size
102KiB
Developer
Category
Users
3,000+ 
Rating
4.8 ★
Manifest Version
3
Web Store Status
Extension ID
Languages Support
Permissions
Storage
UnlimitedStorage
Scripting
ActiveTab
Tabs
Debugger
Downloads
Cookies
See more
UnlimitedStorage
Scripting
ActiveTab
Tabs
Debugger
Downloads
Cookies
AppScan Activity Recorder Extension
AppScan Activity Recorder simplifies web application security testing. It allows you to capture manual crawl, login, and multi-step data (traffic and actions) for an AppScan Dynamic Analysis scan.
Usage Instructions:
• Open a website to record its browsing activity in the Chrome browser.
• On the address bar, click the AppScan Activity Recorder extension icon to start recording the browsing activity.
• The AppScan extension icon blinks indicating progress in recording the activity.
• Tip: The extension icon’s tooltip displays the domain URL being recorded. This is particularly useful when you are accessing different sites in the same Chrome browser instance.
• Perform the browsing activity.
• Click the AppScan extension icon to stop recording.
Or
• Click Cancel in the chrome debugging message dialog box to stop recording.
• The browser prompts you to save the recording in *.dast.config file format.
Options page:
Access the options page by right-clicking the extension icon in the toolbar and then selecting options. Or navigate to the options page by, first, opening chrome://extensions, locating the \"AppScan Activity Recorder\" extension, clicking Details, and then selecting the \"Extension options\" link.
• Open debugger window: This option shows the user activity in a separate window.
• Enable encryption: This option allows encryption of the recording to prevent exposure of recorded information.
Note: Encrypted recorded files will be supported in HCL AppScan Enterprise version 10.4.0 and above and HCL AppScan on Cloud. Any HCL AppScan Integrations as for e.g. HCL AppScan Jenkins and HCL AppScan Azure DevOps Plugins, which integrate with HCL AppScan Enterprise and HCL AppScan on Cloud will also support encrypted recorded files for DAST Scans execution.
Changelog:
• 2.0.0 - Migrated from Manifest V2 to Manifest V3
• 1.1.0 - Support to encrypt recorded files.
\t- Bug fixes.
• 1.0.10 - Updated AppScan icons.
• 1.0.9 - Support for adding browser version and debug option to recorded traffic file.
\t- Bug Fixes related to GPO support.
• 1.0.8 - Support for \"runtime_blocked_hosts\" Extension settings GPO policy to validate the URL to record traffic. Follow instructions in “Set Chrome app and extension policies (Windows)” in this link: https://support.google.com/chrome/a/answer/7532015 to set \"runtime_blocked_hosts\" Extension settings GPO policy in Chrome Browser. Follow instructions in “Configure Microsoft Edge policy settings on Windows” in this link: https://docs.microsoft.com/en-us/deployedge/configure-microsoft-edge to set \"runtime_blocked_hosts\" Extension settings GPO policy in Edge Browser.
\t- Capture AppScan Activity Recorder version info in recorded traffic file.
• 1.0.7 - Fixed a bug to resolve issues wherein partial headers and HTML response were being captured in recorded traffic files.
• 1.0.6 - Support for the new Edge version released on January 15th, 2020 and downloadable from \"https://support.microsoft.com/en-in/help/4501095/download-the-new-microsoft-edge-based-on-chromium\". Follow instructions in “To add an extension to Microsoft Edge from the Chrome Web Store” in this link: \"https://support.microsoft.com/en-us/help/4538971/microsoft-edge-add-or-remove-extensions\" to install AppScan Activity Recorder extension in Edge.
• 1.0.4 - Support to start recording from a blank URL.
• 1.0.3 - Support for log window to record cookies, actions and the requests being hit.
• 1.0.0 - First release
NOTES:
• This extension will record browser traffic that includes request/response and user actions. Scope of recording is only for the current “active” tab where the extension is invoked. No activity is recorded for other tabs even if the user switches to those.
• Before starting the recording, it is recommended to logout from the site; disable auto-sign in/ auto-fill from Chrome settings to enable this extension to record all Browser tab activity.
• Analysis of recordings from websites using HTTP/2 is not currently supported by AppScan.
• From Chrome Version 84.0.4147.105 (Official Build) (64-bit) released on July 28th, 2020, you will see the info banner lingering even after the recording is stopped explicitly via the AppScan Activity Recorder icon. Please note this will not hamper the saved recording or the extension functionality in any way. The Chrome WebStore Dev Support team has confirmed this as an intentional change. Please click on “Cancel” to dismiss the banner.
• In normal mode (without debug enabled), the system tray window displays recording information only.
• For recording to continue, please leave the system tray window open. When finished, click \"Cancel\" or \"Finish Recording\".
• This version (v2.0.0) of the extension currently does not support GPO policy. If feasible, this feature will be included in the next release.
Read more
Usage Instructions:
• Open a website to record its browsing activity in the Chrome browser.
• On the address bar, click the AppScan Activity Recorder extension icon to start recording the browsing activity.
• The AppScan extension icon blinks indicating progress in recording the activity.
• Tip: The extension icon’s tooltip displays the domain URL being recorded. This is particularly useful when you are accessing different sites in the same Chrome browser instance.
• Perform the browsing activity.
• Click the AppScan extension icon to stop recording.
Or
• Click Cancel in the chrome debugging message dialog box to stop recording.
• The browser prompts you to save the recording in *.dast.config file format.
Options page:
Access the options page by right-clicking the extension icon in the toolbar and then selecting options. Or navigate to the options page by, first, opening chrome://extensions, locating the \"AppScan Activity Recorder\" extension, clicking Details, and then selecting the \"Extension options\" link.
• Open debugger window: This option shows the user activity in a separate window.
• Enable encryption: This option allows encryption of the recording to prevent exposure of recorded information.
Note: Encrypted recorded files will be supported in HCL AppScan Enterprise version 10.4.0 and above and HCL AppScan on Cloud. Any HCL AppScan Integrations as for e.g. HCL AppScan Jenkins and HCL AppScan Azure DevOps Plugins, which integrate with HCL AppScan Enterprise and HCL AppScan on Cloud will also support encrypted recorded files for DAST Scans execution.
Changelog:
• 2.0.0 - Migrated from Manifest V2 to Manifest V3
• 1.1.0 - Support to encrypt recorded files.
\t- Bug fixes.
• 1.0.10 - Updated AppScan icons.
• 1.0.9 - Support for adding browser version and debug option to recorded traffic file.
\t- Bug Fixes related to GPO support.
• 1.0.8 - Support for \"runtime_blocked_hosts\" Extension settings GPO policy to validate the URL to record traffic. Follow instructions in “Set Chrome app and extension policies (Windows)” in this link: https://support.google.com/chrome/a/answer/7532015 to set \"runtime_blocked_hosts\" Extension settings GPO policy in Chrome Browser. Follow instructions in “Configure Microsoft Edge policy settings on Windows” in this link: https://docs.microsoft.com/en-us/deployedge/configure-microsoft-edge to set \"runtime_blocked_hosts\" Extension settings GPO policy in Edge Browser.
\t- Capture AppScan Activity Recorder version info in recorded traffic file.
• 1.0.7 - Fixed a bug to resolve issues wherein partial headers and HTML response were being captured in recorded traffic files.
• 1.0.6 - Support for the new Edge version released on January 15th, 2020 and downloadable from \"https://support.microsoft.com/en-in/help/4501095/download-the-new-microsoft-edge-based-on-chromium\". Follow instructions in “To add an extension to Microsoft Edge from the Chrome Web Store” in this link: \"https://support.microsoft.com/en-us/help/4538971/microsoft-edge-add-or-remove-extensions\" to install AppScan Activity Recorder extension in Edge.
• 1.0.4 - Support to start recording from a blank URL.
• 1.0.3 - Support for log window to record cookies, actions and the requests being hit.
• 1.0.0 - First release
NOTES:
• This extension will record browser traffic that includes request/response and user actions. Scope of recording is only for the current “active” tab where the extension is invoked. No activity is recorded for other tabs even if the user switches to those.
• Before starting the recording, it is recommended to logout from the site; disable auto-sign in/ auto-fill from Chrome settings to enable this extension to record all Browser tab activity.
• Analysis of recordings from websites using HTTP/2 is not currently supported by AppScan.
• From Chrome Version 84.0.4147.105 (Official Build) (64-bit) released on July 28th, 2020, you will see the info banner lingering even after the recording is stopped explicitly via the AppScan Activity Recorder icon. Please note this will not hamper the saved recording or the extension functionality in any way. The Chrome WebStore Dev Support team has confirmed this as an intentional change. Please click on “Cancel” to dismiss the banner.
• In normal mode (without debug enabled), the system tray window displays recording information only.
• For recording to continue, please leave the system tray window open. When finished, click \"Cancel\" or \"Finish Recording\".
• This version (v2.0.0) of the extension currently does not support GPO policy. If feasible, this feature will be included in the next release.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "AppScan Activity Recorder", "description": "Record traffic and actions to use in an AppScan Dynamic Analysis scan", "version": "2.0.0", "background": { "service_worker": "js/serviceWorker.js" }, "options_page": "options.html", "icons": { "16": "./images/appscan16.png", "32": "./images/appscan32.png", "64": "./images/appscan64.png", "128": "./images/appscan128.png" }, "action": { "default_icon": "images/appscan128.png" }, "permissions": [ "storage", "unlimitedStorage", "scripting", "activeTab", "tabs", "debugger", "downloads", "cookies" ], "content_scripts": [{ "matches": [ "" ], "js": [ "js/domEvent.js", "js/collectDomElementData.js", "js/appScanBrowserAction.js" ] }], "host_permissions": [ "*://*/*" ]}
Read more
Similar Extensions
OWASP Penetration Testing Kit 3,000+ 43 ★ 7.14MiB
Input hidden Monitor 3,000+ 0 ★ 36.05KiB
Burp Suite Navigation Recorder 3,000+ 3 ★ 279KiB
IP, DNS & Security Tools | HackerTarget.com 3,000+ 31 ★ 94.76KiB
Detectify Recorder 3,000+ 3 ★ 339KiB
Hack-Tools 3,000+ 27 ★ 1.61MiB
Scripter debugger extension 3,000+ 2 ★ 1.04MiB
Tenable.io Web Application Scanning 3,000+ 3 ★ 7.2MiB
Carbon Devtools V10 3,000+ 1 ★ 279KiB
Cyber Web Tools 3,000+ 6 ★ 340KiB
IBM Equal Access Accessibility Checker 3,000+ 16 ★ 29.19MiB
retire.js 3,000+ 9 ★ 132KiB
Android Developer Toolbox 3,000+ 5 ★ 1.79MiB
Qualys Browser Recorder 3,000+ 8 ★ 1.14MiB
Vulners Web Scanner 3,000+ 20 ★ 534KiB
CodeWing - GitHub code navigation 3,000+ 3 ★ 166KiB
Developer's Download Helper 3,000+ 5 ★ 156KiB
XHR JSON Panel 3,000+ 18 ★ 45.82KiB
Dev Playground 3,000+ 2 ★ 288KiB
Admin tools 3,000+ 1 ★ 62.79KiB
Advanced Dev Tools 3,000+ 1 ★ 891KiB
d3coder 3,000+ 37 ★ 108KiB
HackBar 3,000+ 52 ★ 1.56MiB
Rapid7 AppSec Plugin 3,000+ 3 ★ 23.55MiB
User reviews
Eliane Cristina Klein (ID: 00000025965a64e6) Voted 5 ★ - Updated 10/18/2019
Michael Barone (ID: 0000003f3e1c976a) Voted 4 ★ - Updated 02/18/2019
