DAST scanner configuration file

General configuration file keys

Here is a simple and recommended overview of the general configuration file keys. Remember that this applies to all of Fluid Attacks’ scanners .

namespace: myappoutput:  file_path: ./Fluid-Attacks-Results.csv  format: CSVworking_dir: .language: EN

Specific configuration file keys

The following keys are available only for the DAST scanner.

urls

URLs to analyze

http_checks

A boolean that indicates if you want to enable HTTP checks for the URLs (defaults to true)

ssl_checks

A boolean that indicates if you want to enable SSL checks for the URLs (defaults to true) For example, to enable only HTTP checks for the scan:

urls:  - https://my-app.com  - http://localhost.comhttp_checks: truessl_checks: false

Configuration file example

Below is an example of a highly personalized configuration file:

namespace: my_appworking_dir: ./commit: e59607b9de3ef4c13d292705fg3da1ff0c67eb38language: ENoutput:  file_path: /fluid-attacks-results.csv  format: CSVchecks:  - F043

strict: true

urls:

  - https://www.my_app.com

ssl_checks: false