Interactive web application scanning

1. A method of facilitating remediation of one or more vulnerabilities detected in a web application, the method comprising:

receiving information associated with the one or more detected vulnerabilities based on at least one remote vulnerability scan of a web application implemented within one or more web pages of a web site by one or more scanning agents, each of the one or more detected vulnerabilities being a security vulnerability; and

for each vulnerability of the one or more detected vulnerabilities,

navigating to a respective web page that contains the vulnerability based on the received information, the respective web page having been determined to contain the vulnerability prior to receiving the information;

snapping directly to the vulnerability within the respective web page based on the received information; and

visually emphasizing the vulnerability directly within the respective web page.

2. The method of claim 1 , further comprising:

selecting a vulnerability of the one or more detected vulnerabilities as a selected vulnerability; and

providing an inline feedback on the selected vulnerability.

3. The method of claim 2 , wherein the inline feedback comprises a description, a severity, a solution, a plugin output, or any combination thereof of the selected vulnerability.

4. The method of claim 2 , wherein information of the inline feedback on the selected vulnerability is queried from a query service by providing an element selector of the selected vulnerability to the query service.

5. The method of claim 4 , wherein the element selector of the selected vulnerability provided to the query service comprises a CSS selector, an XPath selector, a Node number selector, a Name selector, an Id selector, and a LinkText selector, or any combination thereof.

6. The method of claim 2 , wherein providing the inline feedback on the selected vulnerability comprises:

providing the inline feedback on the selected vulnerability within a vulnerability box, the inline feedback displayed in the vulnerability box comprising a vulnerability ID, a vulnerability name, a vulnerability description, or any combination thereof.

7. The method of claim 6 , wherein providing the inline feedback on the selected vulnerability further comprises:

determining whether a remedy guidance button has been activated; and

providing a remedy description corresponding to the selected vulnerability when it is determined that the remedy guidance button has been activated.

8. The method of claim 6 , wherein providing the inline feedback on the selected vulnerability comprises:

determining whether a replay button has been activated; and

replaying an attack on the selected vulnerability when it is determined that the replay button has been activated.

9. The method of claim 2 , wherein selecting the vulnerability comprises:

determining whether a vulnerabilities button has been activated; and

providing one or more vulnerability links in a vulnerability page box, the one or more vulnerability links being linked to the one or more detected vulnerabilities.

10. The method of claim 9 , wherein the vulnerabilities button is provided within a top portion of a browser interface, the top portion being unscrollable.

11. The method of claim 9 , wherein selecting the vulnerability further comprises:

selecting a vulnerability as the selected vulnerability when a corresponding vulnerability link is activated; and

navigating to a web page that contains the selected vulnerability and snapping directly to the selected vulnerability when the corresponding vulnerability link is activated such that the selected vulnerability is in view.

12. The method of claim 11 , wherein providing the inline feedback on the selected vulnerability comprises:

providing the inline feedback on the selected vulnerability in a vulnerability box upon snapping to the selected vulnerability within the web page.

13. The method of claim 9 , wherein providing the inline feedback on the selected vulnerability further comprises:

determining whether a scan launch button has been activated; and

launching a scan so as to cause the one or more scanning agents to rescan the web page for vulnerabilities when it is determined that the scan launch button has been activated.

14. The method of claim 1 , wherein the method is performed by a browser or a browser extension, the browser and/or the browser extension being configured to display the one or more web pages of the web site.

15. A method of facilitating remediation of one or more vulnerabilities detected in a web application, the method comprising:

identifying the one or more vulnerabilities in the web application based on at least one remote vulnerability scan of the web application implemented within one or more web pages of a web site by one or more scanning agents, each of the one or more detected vulnerabilities being a security vulnerability;

generating information configured to permit a target device, for each of the one or more detected vulnerabilities, to (i) navigate to a respective web page that contains the vulnerability, (ii) snap directly to the vulnerability within the respective web page, and (iii) visually emphasize the vulnerability directly within the respective web page; and

providing the information to the target device,

wherein for each of the one or more detected vulnerabilities, the respective web page is determined to contain the vulnerability prior to providing the information to the target device.

16. The method of claim 15 , wherein the information provided to the target device further comprises inline feedback associated with remediation of a respective vulnerability while snapped to the respective vulnerability.

17. The method of claim 16 , wherein for at least one of the one or more detected vulnerabilities, the inline feedback comprises a description, a severity, a solution, a plugin output, or any combination thereof of the respective vulnerability.

18. The method of claim 16 , wherein the inline feedback is provided to the target device upon receiving a query from the target device.

19. The method of claim 18 ,

wherein the information provided to the target device comprises an element selector for the one or more detected vulnerabilities, and

wherein the inline feedback associated with a selected vulnerability upon receiving the query that includes the element selector of the selected vulnerability, the selected vulnerability being one of the one or more detected vulnerabilities.

20. The method of claim 19 , wherein the element selector of the selected vulnerability comprises a CSS selector, an XPath selector, a Node number selector, a Name selector, an Id selector, and a LinkText selector, or any combination thereof.

21. The method of claim 16 , wherein for at least one of the one or more detected vulnerabilities, the inline feedback comprises a vulnerability ID, a vulnerability name, a vulnerability description, or any combination thereof of the at least one detected vulnerability.

22. The method of claim 16 , wherein for at least one of the one or more detected vulnerabilities, the inline feedback comprises a remedy description to remedy the at least one detected vulnerability.

23. The method of claim 16 , wherein for at least one of the one or more detected vulnerabilities, the inline feedback comprises a replay script enabling the target device to replay an attack corresponding to the at least one detected vulnerability.

24. The method of claim 15 , wherein information provided to the target device comprises one or more vulnerability links linked to the one or more detected vulnerabilities.

25. The method of claim 15 , wherein information provided to the target device comprises a scan script, when executed, that causes the one or more scanning agents to rescan the web page for vulnerabilities.

26. An apparatus configured to facilitate remediation of one or more vulnerabilities detected in a web application, the apparatus comprising:

a memory; and

at least one processor coupled to the memory,

wherein the at least one processor and the memory are configured to:

receive information associated with the one or more detected vulnerabilities based on at least one remote vulnerability scan of a web application implemented within one or more web pages of a web site by one or more scanning agents, each of the one or more detected vulnerabilities being a security vulnerability; and

for each vulnerability of the one or more detected vulnerabilities,

navigate to a respective web page that contains the vulnerability based on the received information, the respective web page having been determined to contain the vulnerability prior to receiving the information;

snap directly to the vulnerability within the respective web page based on the received information; and

visually emphasize the vulnerability directly within the respective web page.

27. An apparatus configured to facilitate remediation of one or more vulnerabilities detected in a web application, the apparatus comprising:

a memory; and

at least one processor coupled to the memory,

wherein the at least one processor and the memory are configured to:

identify the one or more vulnerabilities in the web application based on at least one remote vulnerability scan of the web application implemented within one or more web pages of a web site by one or more scanning agents, each of the one or more detected vulnerabilities being a security vulnerability;

generate information configured to permit a target device, for each of the one or more detected vulnerabilities, to (i) navigate to a respective web page that contains the vulnerability, (ii) snap directly to the vulnerability within the respective web page, and (iii) visually emphasize the vulnerability directly within the respective web page; and

provide the information to the target device,

wherein for each of the one or more detected vulnerabilities, the respective web page is determined to contain the vulnerability prior to providing the information to the target device.

28. A non-transitory computer-readable medium storing a non-transitory computer-readable medium storing computer-executable instructions for an apparatus configured to facilitate remediation of one or more vulnerabilities detected in a web application, the computer-executable instructions comprising:

one or more instructions causing the apparatus to receive information associated with the one or more detected vulnerabilities based on at least one remote vulnerability scan of a web application implemented within one or more web pages of a web site by one or more scanning agents, each of the one or more detected vulnerabilities being a security vulnerability; and

for each vulnerability of the one or more detected vulnerabilities,

one or more instructions causing the apparatus to navigate to a respective web page that contains the vulnerability based on the received information, the respective web page having been determined to contain the vulnerability prior to receiving the information;

one or more instructions causing the apparatus to snap directly to the vulnerability within the respective web page based on the received information, and

one or more instructions causing the apparatus to visually emphasize the vulnerability directly within the respective web page.

29. A non-transitory computer-readable medium storing a non-transitory computer-readable medium storing computer-executable instructions for an apparatus configured to facilitate remediation of one or more vulnerabilities detected in a web application, the computer-executable instructions comprising:

one or more instructions causing the apparatus to identify the one or more vulnerabilities in the web application based on at least one remote vulnerability scan of the web application implemented within one or more web pages of a web site by one or more scanning agents, each of the one or more detected vulnerabilities being a security vulnerability;

one or more instructions causing the apparatus to generate information configured to permit a target device, for each of the one or more detected vulnerabilities, to (i) navigate to a respective web page that contains the vulnerability, (ii) snap directly to the vulnerability within the respective web page, and (iii) visually emphasize the vulnerability directly within the respective web page; and

one or more instructions causing the apparatus to provide the information to the target device,

wherein for each of the one or more detected vulnerabilities, the respective web page is determined to contain the vulnerability prior to providing the information to the target device.