Question 1

How to start a test on Beagle Security?

Accepted Answer

To get started with Beagle Security:

Sign up using your email address and verify it through the confirmation email.
Set up your profile by entering your name and creating a password.
Complete the onboarding form by answering a few short questions.
Set up your first application:

Enter a Project name
Enter an Application name
Provide the Website URL
Click Continue

You’ll see a message confirming that your application was created successfully.

You'll now be prompted to complete domain verification. You can choose either:

File verification – upload a file to your server.
DNS verification – add a TXT record to your domain's DNS
HTML tag verification
WordPress plugin verification

Once your domain is verified, you’ll be directed to the Beagle Security dashboard, where you can configure your test settings and start your first application security test.

Question 2

How to set up automatic email forwarding for 2FA or magic link enabled login?

Accepted Answer

How to set up automatic email forwarding in Gmail web?

Log into your Gmail account
Click on the show search option from the search box at the top
Enter your search criteria i.e., enter the criteria for the emails you want to forward. This could include specific senders (from address), subjects, keywords, or any other relevant information.
Click on "Search" to see which emails match your search criteria. This step ensures that your search is working correctly and captures the emails you want to forward.
Click on the “Advanced search” button and then proceed to click on "Create filter”. Select the option "Forward it to" to set up automatic forwarding.
After choosing the forwarding option, enter the email address to which you want to forward the emails and proceed to click create filter.

How to set up automatic email forwarding in Outlook web?

Upon opening your Outlook web application, click on Settings >> Email > > Rules and then click on Add new rule.
For each rule you should enter a name, at least 1 condition and an action. They are as follows: Name Give your rule a descriptive name for easy identification and editing after setup. Condition You should specify the reason for forwarding your email, which is setting condition for your email forwarding. Here, you can set multiple conditions for a single rule. "From”: for forwarding emails from a specific email to anot

Question 3

Login Recorder: Record the login sequence of your application

Accepted Answer

For web applications with a login module, Beagle Security allows you to submit a recording of the login sequence in order to improve the efficiency of the automated penetration tests. To record the login sequence of an application, you'll have to first download the Beagle Login Recorder extension from the application settings. Please note that providing user credentials for CMS websites may alter data on your website during testing.

A few points to note while recording a login sequence:

Do not use the login credentials of an admin account. It is advised to create a separate user account specifically for the automated penetration testing purpose on Beagle Security.
It is recommended to record an application's login sequence in incognito mode (Note: Extensions are not available by default in incognito mode. You'll have to enable extensions by going to More tools > Extensions).
After completing the login sequence, you don't have to navigate around the specific web application- you can stop the recording and submit it as soon as you're logged in to the application.

Using the Beagle Login Recorder extension

To get started, install the Beagle Login Recorder extension from the Chrome Web Store by searching for Beagle Sequence Record. Or download the plugin here.
Once the extension is installed, you'll be able to see the Beagle Security icon in the

Question 4

What if I want to delete my account?

Accepted Answer

f you wish to delete your Beagle Security account, you can raise a request by contacting our support team or through your account by navigating to Profile through the Profile badge and then clicking on Delete account.

Account deletion is a permanent action and will result in the loss of all associated data, including test results, applications and test reports.

Question 5

Out of Band vulnerability detection on Beagle Security

Accepted Answer

What is an Out-of-Band (OOB) vulnerability?

Out-of-Band vulnerabilities are vulnerabilities that cannot be found in a traditional penetration testing methodology (HTTP request-response). Mostly found in web applications, APIs, and backend programs, this vulnerability has a distinct working process.

How does a hacker exploit an Out-of-Band vulnerability?

A payload is crafted to send a specific request to the bad actor’s machine.
It is then uploaded to the target service/application.

What makes OOB vulnerability distinct from all other vulnerabilities is that often the vulnerable service/application is required to generate an outbound TCP/UDP/ICMP request (HTTP request-response is behind other vulnerabilities) which allows the attacker to exploit the vulnerable service.Also, OOB vulnerability remains intact till the vulnerable service is triggered by the user or another service, and it may happen either immediately or after certain days. It can even happen when another service is triggered, present within the application itself, or even from a completely different web application.

Once the vulnerability is triggered when interaction happens in the vulnerable service/application, the TCP/UDP/ICMP request is sent to the attacker machine with which the hacker can then execute arbitrary codes in accordance with the vulnerability present in it. Commonly found Out-of-Band vulnerabilities:

Server-Side Request Forgery (SSRF)

Out of Band XML External Enti

Question 6

How to set up Discord notifications for uptime monitoring?

Accepted Answer

If you would like to receive notifications about an application's uptime monitoring on Discord, you can set up the integration by following the below steps:

Go to the specific Application dashboard and click on the Edit option for Uptime Monitoring
Enable Down notification and click on Discord. You'll be asked to enter a Webhook URL
To generate the webhook URL, go to the Discord server you want to integrate with
Select the relevant text channel you want to receive notifications on and click on the Edit channel option (Note: You need specific edit permission in the Discord server)
Select Integrations and click on Create webhook option
You can give it a name, an avatar and then click on the Copy webhook URL button
Go back to your Beagle Security account and paste the webhook URL there
Click on the Test button to check if you're receiving the notifications on Discord. Click on Save to complete the configuration

Frequently Read Articles

Browse All Categories