{"id":16717,"date":"2021-11-23T15:55:05","date_gmt":"2021-11-23T10:25:05","guid":{"rendered":"https:\/\/www.getastra.com\/blog\/?p=16717"},"modified":"2024-04-30T15:29:25","modified_gmt":"2024-04-30T09:59:25","slug":"astra-login-recorder","status":"publish","type":"post","link":"https:\/\/www.getastra.com\/blog\/astra-product\/astra-login-recorder\/","title":{"rendered":"Astra Login Recorder – A Better Way to Secure Websites"},"content":{"rendered":"\n

Gone are the days when organizations used to run and scale their offline businesses at three-toed sloth\u2019s speed. The inception of the Internet turned into a really pervasive and groundbreaking force in our life, with millions of Websites serving billions of web pages to people on a daily basis. Through various advancements, web and SaaS applications have become intelligent, dynamic and asynchronous.<\/strong> The Web’s pervasiveness and our dependence on it have made it basic to guarantee the quality and security rightness of these applications. To ensure this, the testing of web<\/a> and SaaS applications <\/a>have become a generally utilized strategy for validation. It is a long-standing, dynamic and diverse technique.<\/strong><\/p>\n\n\n\n

Today\u2019s websites and web applications are categorized as static, dynamic, animated, single-page or multi-page applications. These applications require a comprehensive set of test cases that should ensure all the quality and security checks are met and the web application is completely secured against any kind of hacking attempt or vulnerability exploit. This is where Astra Pentest<\/strong><\/a> <\/strong>comes in.<\/p>\n\n\n\n

Today, we are celebrating the launch of the Astra Login Recorder extension.<\/strong> This is the latest feature we recently added into our Astra Pentest solution (as a part of our automated vulnerability scanner) and is now available to our users.<\/p>\n\n\n\n

\"Celebrating<\/figure><\/div>\n\n\n\n

In order to scan a website thoroughly for security weaknesses, our vulnerability scanner requires desired authentication privilege (entered by a user) so that the scanner can smoothly perform the security checks behind the login pages as well. Previously, our users needed to enter the login details into Astra\u2019s Pentest dashboard manually and it was becoming a quite time-consuming task. To solve this problem and make the process more hassle-free, we heard our users and decided to announce Astra Login Recorder into our Pentest solution.<\/strong><\/p>\n\n\n\n

Astra Login Recorder is available as a Google Chrome extension <\/strong>which allows you to instruct Astra\u2019s vulnerability scanner on how to automatically authenticate into your website by recording your login sequence.<\/p>\n\n\n\n

<\/span>To set up Astra Login Recorder, follow these steps:<\/strong><\/span><\/h2>\n\n\n\n

Step 1:<\/strong> Log in<\/strong> to your Project in Astra Pentest<\/p>\n\n\n\n

Step 2:<\/strong> Go to <\/strong>the \u201cStart an Audit\u201d section by clicking on the \u201cStart an Audit\u201d<\/em> button in the main dashboard.<\/p>\n\n\n\n

\"Step<\/figure><\/div>\n\n\n\n

And then click on Edit<\/em><\/strong> () button to set up and configure the Scan Behind Login feature. <\/p>\n\n\n\n

Step 3: Enter Test Credentials <\/strong>for User Roles (Eg. Admin, Customer, Super Admin etc)<\/p>\n\n\n\n

\"Step<\/figure><\/div>\n\n\n\n

Click on \u201c<\/strong>Save & Next\u201d<\/em><\/strong> <\/strong>button.<\/p>\n\n\n\n

Step 4:<\/strong> Follow the steps mentioned in the Login Recording (Step 2 in dashboard) to download and configure the extension<\/strong>.<\/p>\n\n\n\n

\"Follow<\/figure><\/div>\n\n\n\n

To download and install the login recording extension from the Chrome web store, click on the Astra Login Recorder hyperlinked text<\/strong>. Upon clicking the text, It will redirect you to the Astra Login Recorder page of Google\u2019s Chrome web store.<\/p>\n\n\n\n

\"To<\/figure><\/div>\n\n\n\n

When you Add to Chrome, <\/strong>the extension will be installed on your browser. Once it is installed, you’ll be able to see the Astra Security icon in your browser.<\/p>\n\n\n\n

\"Once<\/figure><\/div>\n\n\n\n

You can now click on the extension and it will open the Login Recorder window where you can enter the login URL of your site<\/strong>. (For example: If your site is running on WordPress, your login URL might look like this: www.yourwebsite.com\/login\/<\/em>)<\/p>\n\n\n\n

\"click<\/figure><\/div>\n\n\n\n