Our vBulletin migration is complete.
Welcome vBulletin users! All content and user information from the Micro Focus Forums (vBulletin) site has been migrated to this site. READ MORE.
Highlighted
sethumady
New Member.
3053 views

Is it possible to Integrate HP Unified Functional Testing tool(UFT) with HP WebInspect

We are trying to leverage the automation script capabilities of UFT and integrate it with HP WebInspect. Is there any possiblity for that? Is it possible to re-use the UFT scripts in WebInspect? If so, how to do it?

A detailed explanation is appreciated.

Thanks in Advance.

Regards,

Sethu

Labels (3)
0 Likes
5 Replies
Micro Focus Expert
Micro Focus Expert

Re: Is it possible to Integrate HP Unified Functional Testing tool(UFT) with HP WebInspect

Yes, WebInspect already supports this, although that fact is unfortunately a bit hidden.  You can directly select UFT scripts in the Workflow Macro selection fields of WebInspect scan wizard (Guided or Basic), and those are then used to drive the Workflow-driven scans.  Sadly, the UFT file format option does not appear in the selection window unless you have installed the UFT client on the WebInspect workstation.    😞

Separately from this UFT-specific connection, WebInspect's API could offer you a variety of ways to run your functional tests through WebInspect.  You must configure and start the API using the System Tray icon, HPe Fortify Monitor (launch from Start Menu if missing).  Once running, the API and its documentation is located at (default configuration) http://localhost:8083/webinspect/api   It offers two key functions, the ability to open/run/record/close Web Proxy instances, and the ability to run or monitor WebInspect scans.  Rather than selecting UFT scripts in the WebInspect scan wizard, you could instead have your script engine call the WI API to start a Web Proxy listener, run the functional tests through that proxy, halt the proxy, save the proxy capture as a Workflow macro, and then issue an API call to kick off a WebInspect scan using that Workflow macro.

Lastly, the old WebInspect CLI offers many of the same basic scan options as the API.  Provided you can remotely call that executable (network security will probably hate that), then the CLI can be used for automated scans, which I have seen done in Jenkins.


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify
sethumady
New Member.

Re: Is it possible to Integrate HP Unified Functional Testing tool(UFT) with HP WebInspect

Thanks a lot for your detailed answer. Would follow the steps for the integration and update in this forum.

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Is it possible to Integrate HP Unified Functional Testing tool(UFT) with HP WebInspect

PS - As I have learned from beating down Jenkins, when running the WebInspect scan remotely via the CLI, the user account running the script needs to be the same that has activated the WebInspect license.  Int he case of Jenkins, the command runs as the user account running the Jenkins service, so that makes it complicated for decision-making and security.  PSEXEC offers ways to pass alternate user credentials.  The Windows RunAs command may work, but I believe it requests the password as a pop-up, so that may not function well for your particular scripting needs.  There are probably many others out there to use.


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify
0 Likes
sethumady
New Member.

Re: Is it possible to Integrate HP Unified Functional Testing tool(UFT) with HP WebInspect

I tried with the first approach. Even after installing UFT client, WebInspect does not recognise the UFT file formats in the Workflow macro imports. I tried uninstalling and re-installing of WI. But still no use.

Webinspect 16.20 installed in Windows 7 with UFT12.5 in the same system.

Am I missing out anything here?

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Is it possible to Integrate HP Unified Functional Testing tool(UFT) with HP WebInspect

I could not find a reference as to which versions of UFT are supported by WebInspect 16.20.  Be sure you are not referrign to LeanFT in this configuration.  I will check internally to see if there is a version requirement.

 

Here are the instructions from the WebInspect User Guide.

=============================================================================

=============================================================================

=============================================================================

Importing HPE Unified Functional Testing (UFT) Files in a Guided Scan


If you have the HPE Unified Functional Testing application installed, Fortify WebInspect detects it and allows you to import a UTF file (.usr) into your workflow scan to enhance the thoroughness and attack surface of your scan. For more information, see HPE Unified Functional Testing
on the HPE Web site.
To import a UTF (.usr) file into a Fortify WebInspect Guided Scan:


1. Launch a Guided Scan, and then select Workflow Scan as the Scan Type. Additional text appears under the Workflows scan option: HPE Unified Functional Testing has been detected. You can import scripts to improve the thoroughness of your security test.

2. Click the Next button.

3. In the Authentication section, Application Authentication is automatically selected. Complete the fields as indicated.

4. On the Manage Workflows screen, click Import. The Import Scripts dialog appears. On the Import Scripts dialog, you may:
    l Type the filename.
    l Browse to your file by clicking to locate your file with a .usr extension. Select HPE Unified Functional Testing
from the drop-down file type, and then navigate to the file.
    l Click Edit to launch the HPE Unified Functional Testing application.

5. (Optional) On the Import Scripts dialog, you may select either of the following options:
    l Show HPE Unified Functional Testing UI during import
    l Open script result after import

6. Select the file to import, and then click Import. After your file is successfully imported, the file appears in the Workflows table.

7. Select one of the following from the Workflows table:
    l Record - launches the WebInspect Unified Macro Recorder. For more information, see "Unified Web Macro Recorder" in the
Tools Guide for Fortify WebInspect Products.
    l Edit - allows you to modify the file using the Unified Web Macro Recorder. See "Unified Web Macro Recorder" in the
Tools Guide for Fortify WebInspect Products.
    l Delete - deletes the script from the Workflows table.
    l Import - import another file.
    l Export - saves a file in .webmacro format with the name and location you specify.

8. Click the Next button.
When the first .usr script file is added to the list, its name (or default name) appears in the Workflows table and an Allowed Hosts table is added to the pane.
Adding another .usr script file can add more allowed hosts. Any host that is enabled is available to all the listed workflow .usr script files, not just the workflow.usr file for which it was added. The Guided Scan will play all the listed workflow files and make requests to all the listed allowed hosts, whether or not their check boxes are selected. If a check box for an allowed host is selected, Fortify WebInspect will crawl or audit the responses from that host. If a check box is not selected, Fortify WebInspect will not crawl or audit the responses from that host. In addition, if a particular workflow .usr script uses parameters, a Macro Parameters table is displayed when that workflow macro is selected in the list. Edit the values of the parameters as needed.

9. After you have completed changes or additions to the Workflows table, proceed in the Guided Scan wizard to complete your settings and run the scan. For more information about recording a new login macro or using an existing login macro, see the "Unified Web Macro Recorder" chapter in the
Tools Guide for Fortify WebInspect Products
.

=============================================================================

=============================================================================

=============================================================================


-- Habeas Data
Micro Focus Fortify Customers-Only Forums – https://community.softwaregrp.com/t5/Fortify/ct-p/fortify
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.