Skip to main content

Create LSR files manually

This document describes how to create .lsr files in Invicti Platform manually. For an overview of the LSR files, refer to the LSR files overview document.

Creating LSR files manually involves these five simple steps:

Step 1: Navigate to the target application​

  1. Open Google Chrome and navigate to the login page of your target application.
  2. Copy the URL of the login page as it is needed in the LSR file.

Step 2: Click to open the login form (if necessary)​

  1. If the login form is behind a button or a menu (for example, a "Sign In" link on the homepage), locate the button.
  2. Right-click the button, select Inspect, then copy the XPath or CSS selector.

Step 3: Identify login elements using Chrome DevTools​

  1. Right-click on the username input field and select Inspect.
  2. Locate the XPath or CSS selector of the input field.
  3. Right-click the highlighted HTML element, hover over Copy, and select Copy XPath or Copy selector.
  4. Repeat this process for the password field and login button.
  5. If the login process includes additional steps (for example, OTP input), capture those elements as well.

Step 4: Construct the JSON file​

Using a text editor, create a new file and structure it as follows:

{
    "actions": [
        {
            "parameters": {
                "friendly": "http://yourdomain.com"
            },
            "target": "http://yourdomain.com",
            "timeout": 22000,
            "type": "navigate"
        },
        {
            "parameters": {
                "friendly": "A with text \"Your profile\"",
                "alt_targets": [
                    {
                        "type": "xpath",
                        "value": "//a[@href='userinfo.php' and contains(text(), 'Your profile')]"
                    },
                    {
                        "type": "css",
                        "value": "#sectionLinks > ul > li:nth-child(5) > a"
                    }
                ]
            },
            "target": "//a[@href='userinfo.php' and contains(text(), 'Your profile')]",
            "timeout": 20000,
            "type": "click"
        },
        {
            "parameters": {
                "value": "test",
                "friendly": "INPUT named uname",
                "alt_targets": [
                    {
                        "type": "xpath",
                        "value": "//input[@name='uname' and @type='text']"
                    },
                    {
                        "type": "css",
                        "value": "#content > div:nth-child(1) > form > table > tbody > input[type=\"text\"]"
                    }
                ]
            },
            "target": "//input[@name='uname' and @type='text']",
            "timeout": 20000,
            "type": "change"
        },
        {
            "parameters": {
                "value": "test",
                "friendly": "INPUT named pass",
                "password": true,
                "alt_targets": [
                    {
                        "type": "xpath",
                        "value": "//input[@name='pass' and @type='password']"
                    },
                    {
                        "type": "css",
                        "value": "#content > divinput[type=\"password\"]"
                    }
                ]
            },
            "target": "//input[@name='pass' and @type='password']",
            "timeout": 20000,
            "type": "change"
        },
        {
            "parameters": {
                "friendly": "login",
                "alt_targets": [
                    {
                        "type": "xpath",
                        "value": "//input[@type='submit' and @value='login']"
                    },
                    {
                        "type": "css",
                        "value": "#content > input[type=\"submit\"]"
                    }
                ]
            },
            "target": "//input[@type='submit' and @value='login']",
            "timeout": 20000,
            "type": "click"
        }
    ],
    "detection": {
        "type": "statusis",
        "pattern": "200",
        "request": "GET http://yourdomain.com/userinfo.php HTTP/1.1\n\n",
        "headers": []
    },
    "restrictions": [
        "GET http://yourdomain.com/logout.php HTTP/1.1"
    ],
    "config": {
        "viewport": {
            "width": 688,
            "height": 612,
            "screenWidth": 2560,
            "screenHeight": 1440
        },
        "restrictedElements": [
            {
                "path": "//a[@href='logout.php']",
                "source": "auto",
                "ref": "GET http://yourdomain.com/logout.php HTTP/1.1"
            }
        ]
    }
}

Step 5: Save and upload the JSON file​

  1. Save the file with a .lsr extension (for example, my_login.lsr).
  2. Select Inventory > Targets from the left-side menu.
  3. Select three-dot menu (⋮) > Edit target by the specific target you want to edit.
  4. In the Authentication section select Login Sequence Recorder from drop-down.
  5. Select Upload sequence to select and import your saved .lsr file.

Additional configuration options​

  • Timeouts: Adjust timeout values to prevent premature failures.
  • Viewports: Define viewport sizes to simulate different screen resolutions.

Need help?​

Invicti Support team is ready to provide you with technical help. Go to Help Center

Was this page useful?