A New Architecture of Ajax Web Application Security Crawler with Finite-State Machine

As Ajax webpage can be built by Javascript function, Ajax makes it possible to send asynchronous requests to the server and handle the response in the background. It is not definite that the current URL reflects the current state of the webpage. The traditional approach of security crawler can not walk through the Ajax web application to collect all the interface information for web security testing. In this page, we will introduce several benefits of Ajax web application and some technical differences about the crawler and propose a new model based on finite-state machine with double filter strategy to make it possible for Ajax web application security test automatically. Additionally, the crawler will be highly compatible with the metaspolit framework.