# Scanner

## Scanning Section

The **Scanning/Scanned Page** inside the Scanner section is the most relevant when a scan is in progress. It provides real-time insights into the scan’s progress, showing what parts of the target application are being analyzed and how far along the scan has progressed.

This page helps you **track and monitor** the scan efficiently.

<figure><img src="https://1825008717-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs6Y7hKb1RwZWFZo4EnUm%2Fuploads%2Fcuu4Vpx7rshuyQ2UqMId%2Fimage.png?alt=media&#x26;token=ac53be14-a3a8-477b-a781-0db720bdbd11" alt="" width="563"><figcaption></figcaption></figure>

#### **URLs Being Crawled**

The scan categorizes URLs into different states as they are being tested:\
:hourglass\_flowing\_sand:**Crawling Unauthenticated** – URLs discovered without logging in.\
:hourglass\_flowing\_sand:**Crawling Authenticated** – URLs accessed after authentication.\
:hourglass\_flowing\_sand: **OWASP Top 10** – URLs where vulnerabilities from the OWASP Top 10 list are being actively tested.

Each category helps in understanding which parts of the application are accessible and tested under different conditions.

#### **Scan Status & Progress**

* Displays a **real-time percentage** of the scan’s completion.
* Helps you estimate how long the scan might take to finish.

<figure><img src="https://1825008717-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs6Y7hKb1RwZWFZo4EnUm%2Fuploads%2Fvfa6eE2qLqNKfx1nsbju%2Fimage.png?alt=media&#x26;token=b24e4412-f35d-4278-ba4d-adc4c577ad76" alt=""><figcaption></figcaption></figure>

## Crawled URIs

The **Crawled URIs** page shows the full sitemap generated by ZeroThreat, showing all the URIs that the tool has crawled during a scan. This feature enables users to easily visualize the structure of the application and identify both authenticated and unauthenticated areas of the site.

The sitemap is displayed in a tree structure, making it easy to navigate through the application’s resources. Each node represents a directory or file, and you can expand or collapse sections to find what you need quickly.

<figure><img src="https://1825008717-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs6Y7hKb1RwZWFZo4EnUm%2Fuploads%2FxXwVOgVt4gNpy7RQy61O%2Fimage.png?alt=media&#x26;token=99b33682-14e3-4862-8f08-5b60278e9148" alt="" width="563"><figcaption></figcaption></figure>

You can filter the URIs by whether they were crawled after authentication or not, helping you focus on different areas of the site.

<figure><img src="https://1825008717-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs6Y7hKb1RwZWFZo4EnUm%2Fuploads%2FU9ARIXBc7rIxBnKc95nf%2Fimage.png?alt=media&#x26;token=f7109da9-7b16-4081-ae47-0da5be9c1b57" alt="" width="170"><figcaption></figcaption></figure>

#### **Form Requests**

Forms play a crucial role in web applications, handling user input in various scenarios, from login pages and search bars to registration and feedback forms. The **Form Requests** section lists all forms detected during the scan, giving you visibility into potential security risks related to user input.

Clicking on a  individual form provides all the inputs in the form and other relevant information.

<figure><img src="https://1825008717-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fs6Y7hKb1RwZWFZo4EnUm%2Fuploads%2FiORvCoTLlzTSKGww1Cq7%2Fimage.png?alt=media&#x26;token=ebf43ee0-c784-408f-a5a1-2fca51be2d1e" alt="" width="563"><figcaption></figcaption></figure>

{% hint style="success" %}
Forms are common attack vectors for **SQL Injection, XSS, and CSRF**, reviewing this section helps identify weak points where user input handling can be improved.
{% endhint %}

