maxtac-web-surface-triage

Web triage identifies key actors, routes, sessions, and security aspects of a web application. You need it to perform efficient initial evaluation and assessment of potential vulnerabilities within a controlled environment before deeper auditing.

You can perform this security assessment by using predefined criteria to gather and analyze web application metadata. The process involves defining targets, mapping identity and state, and capturing artifacts like HAR files and curl reproducers for analysis.

Yes, you can capture packets, HAR files, curl reproducers, and screenshots during the triage process. Capturing these artifacts encourages comprehensive documentation for future reference during web application security assessment.

You should collect packets, HAR files, curl reproducers, and screenshots. Capturing these artifacts during initial evaluation provides a comprehensive snapshot of APIs and services to aid in future reference and analysis.

Yes, web surface triage supports integration with tools like maxtac-source for code-level analysis and maxtac-web-api-fuzzing for fuzzing. This integration helps transition from initial surface evaluation to deeper vulnerability identification.

Use surface-level triage for initial evaluation of web applications, APIs, and services to identify critical elements quickly. It is intended as a first step before deeper auditing, providing a snapshot without full vulnerability scanning.