... | @@ -177,7 +177,7 @@ When verbosity is enabled Arachni will give you detailed information about what' |
... | @@ -177,7 +177,7 @@ When verbosity is enabled Arachni will give you detailed information about what' |
|
|
|
|
|
Let's give this a try:
|
|
Let's give this a try:
|
|
|
|
|
|
```arachni --audit-forms --modules=xss http://testfire.net/ --link-count=1```
|
|
arachni --audit-forms --modules=xss http://testfire.net/ --link-count=1
|
|
|
|
|
|
|
|
|
|
This will load the XSS module and audit all the forms in "http://testfire.net/".
|
|
This will load the XSS module and audit all the forms in "http://testfire.net/".
|
... | @@ -491,9 +491,7 @@ Cookies, as a string, to be sent to the web application. |
... | @@ -491,9 +491,7 @@ Cookies, as a string, to be sent to the web application. |
|
|
|
|
|
<h4 id='cookie-string_example'><a href='#cookie-string_example'>Example</a></h4>
|
|
<h4 id='cookie-string_example'><a href='#cookie-string_example'>Example</a></h4>
|
|
|
|
|
|
```
|
|
--cookie-string='userid=19;sessionid=deadbeefbabe'
|
|
--cookie-string='userid=19;sessionid=deadbeefbabe'
|
|
|
|
```
|
|
|
|
|
|
|
|
<h3 id='user-agent'><a href='#user-agent'>User agent (--user-agent)</a></h3>
|
|
<h3 id='user-agent'><a href='#user-agent'>User agent (--user-agent)</a></h3>
|
|
|
|
|
... | @@ -539,7 +537,7 @@ The `--authed-by` value should contain information about the person who authoriz |
... | @@ -539,7 +537,7 @@ The `--authed-by` value should contain information about the person who authoriz |
|
<h4 id='authed-by_example'><a href='#authed-by_example'>Example</a></h4>
|
|
<h4 id='authed-by_example'><a href='#authed-by_example'>Example</a></h4>
|
|
|
|
|
|
|
|
|
|
``` --authed-by='John Doe <jdoe@test.com>'```
|
|
--authed-by='John Doe <jdoe@test.com>'
|
|
|
|
|
|
|
|
|
|
<h3 id='login-check-url'><a href='#login-check-url'>Login check URL (--login-check-url)</a></h3>
|
|
<h3 id='login-check-url'><a href='#login-check-url'>Login check URL (--login-check-url)</a></h3>
|
... | @@ -608,7 +606,7 @@ The load profile option does not restrict your ability to specify more options o |
... | @@ -608,7 +606,7 @@ The load profile option does not restrict your ability to specify more options o |
|
<h4 id='load-profile_example'><a href='#load-profile_example'>Example</a></h4>
|
|
<h4 id='load-profile_example'><a href='#load-profile_example'>Example</a></h4>
|
|
|
|
|
|
|
|
|
|
```arachni --load-profile=myprofile.afp```
|
|
arachni --load-profile=myprofile.afp
|
|
|
|
|
|
|
|
|
|
<h3 id='show-profile'><a href='#show-profile'>Show profile (--show-profile)</a></h3>
|
|
<h3 id='show-profile'><a href='#show-profile'>Show profile (--show-profile)</a></h3>
|
... | @@ -625,7 +623,7 @@ This option will output the running configuration as a string of command line ar |
... | @@ -625,7 +623,7 @@ This option will output the running configuration as a string of command line ar |
|
<h4 id='show-profile_example'><a href='#show-profile_example'>Example</a></h4>
|
|
<h4 id='show-profile_example'><a href='#show-profile_example'>Example</a></h4>
|
|
|
|
|
|
|
|
|
|
` arachni --show-profile --load-profile=myprofile.afp`
|
|
arachni --show-profile --load-profile=myprofile.afp
|
|
|
|
|
|
<h2 id='crawler'><a href='#crawler'>Crawler</a></h2>
|
|
<h2 id='crawler'><a href='#crawler'>Crawler</a></h2>
|
|
|
|
|
... | @@ -1160,23 +1158,17 @@ You can prevent modules from loading by prefixing their name with a dash (`-`). |
... | @@ -1160,23 +1158,17 @@ You can prevent modules from loading by prefixing their name with a dash (`-`). |
|
|
|
|
|
As CSV:
|
|
As CSV:
|
|
|
|
|
|
```
|
|
$ arachni --modules=xss,sqli,path_traversal http://localhost/
|
|
$ arachni --modules=xss,sqli,path_traversal http://localhost/
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
All modules:
|
|
All modules:
|
|
|
|
|
|
```
|
|
$ arachni http://localhost/
|
|
$ arachni http://localhost/
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
Excluding modules:
|
|
Excluding modules:
|
|
|
|
|
|
```
|
|
$ arachni --modules=*,-backup_files,-xss http://www.test.com
|
|
$ arachni --modules=*,-backup_files,-xss http://www.test.com
|
|
|
|
```
|
|
|
|
|
|
|
|
The above will load all modules except for the _backup_files_ and _xss_ modules.
|
|
The above will load all modules except for the _backup_files_ and _xss_ modules.
|
|
|
|
|
... | | ... | |