Deploying AcuSensor for PHP - Docker

You can use AcuSensor to carry out interactive security testing (IAST) in your web application to confirm more vulnerabilities and further minimize false positives.  

For AcuSensor to operate, you need to download an agent and deploy it on your server. Please note that this agent is generated uniquely for each target website for security reasons.

The most principled way of deploying AcuSensor in a Docker scenario is to simply layer the AcuSensor sensor modifications onto your already existing container definition.

This simple example will demonstrate how you can deploy AcuSensor together with your web application. There are 4 steps to do this.

Step 1. Create your target in Acunetix 360

For this example, we will assume that the URL for your target is http://acusensorexample.com:60000. Go to Acunetix 360 and create a new target with your URL. From New Scan, select this URL for the scan, then enable AcuSensor. Download the AcuSensor agent file acusensor.php, and save this file for use later on.

Step 2. Define the web application image

1. This simple web application will be defined through the following file structure:

2. Create your /testphp-docker/Dockerfile file to read as follows:

3. Create your /testphp-docker/websrc/index.php file to read as follows:

4. Create your /testphp-docker/websrc/test.php file to read as follows:

5. Build the image with:

Step 3. Define the AcuSensor layer image

1. The AcuSensor layer will be defined through the following file structure:

2. Copy the acusensor.php file you created in the first step to your docker host into the /testphp-docker-acusensor directory.
3. Create your /testphp-docker-acusensor/Dockerfile file to read as follows:

4. Build and run your image with:

Step 4. Test and scan your web application

Point your browser to your web application. In this example, http://acusensorexample.com:6000 to confirm it is running as intended.