AWS Continuum now supports credential testing and accessible domain suggestions

AWS Continuum for Penetration Testing Updates

AWS Continuum for penetration testing now offers on-demand, customized penetration testing with real exploitability testing. Developers and security teams can now test login credentials and receive suggested domains before a penetration test runs, reducing misconfiguration and wasted test cycles.

With this update, when you add login credentials during test configuration, AWS Continuum authenticates into your application exactly as a real user would, capturing every accessible domain reached during login and surfacing them as in-scope URL suggestions. You can review accessible domains, validate credentials, and confirm the agent covers the right endpoints, all before the real test begins. Accessible domains are returned regardless of whether the credential test succeeds, fails, or times out.

What to do

• Add login credentials during test configuration to authenticate into your application.
• Review accessible domains and validate credentials before the real test begins.
• Confirm the agent covers the right endpoints.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.