... | @@ -11,13 +11,13 @@ _If you intend to scan big and complex sites it's best that you read through thi |
... | @@ -11,13 +11,13 @@ _If you intend to scan big and complex sites it's best that you read through thi |
|
|
|
|
|
In order to see everything Arachni has to offer execute:
|
|
In order to see everything Arachni has to offer execute:
|
|
|
|
|
|
$ arachni -h
|
|
arachni -h
|
|
|
|
|
|
#### Examples
|
|
#### Examples
|
|
|
|
|
|
You can simply run Arachni like so:
|
|
You can simply run Arachni like so:
|
|
|
|
|
|
$ arachni http://test.com
|
|
arachni http://test.com
|
|
|
|
|
|
which will load all checks, the plugins under `/plugins/defaults` and audit
|
|
which will load all checks, the plugins under `/plugins/defaults` and audit
|
|
all forms, links and cookies.
|
|
all forms, links and cookies.
|
... | @@ -99,7 +99,8 @@ in the [knowledge base](http://support.arachni-scanner.com/kb/). |
... | @@ -99,7 +99,8 @@ in the [knowledge base](http://support.arachni-scanner.com/kb/). |
|
* [Include (--scope-include-pattern)](#scope-include-pattern)
|
|
* [Include (--scope-include-pattern)](#scope-include-pattern)
|
|
* [Include subdomains (--scope-include-subdomains)](#scope-include-subdomains)
|
|
* [Include subdomains (--scope-include-subdomains)](#scope-include-subdomains)
|
|
* [Exclude (--scope-exclude-patterns)](#scope-exclude-patterns)
|
|
* [Exclude (--scope-exclude-patterns)](#scope-exclude-patterns)
|
|
* [Exclude page by content (--exclude-content-pattern)](#exclude-content-pattern)
|
|
* [Exclude page by content (--scope-exclude-content-pattern)](#scope-exclude-content-pattern)
|
|
|
|
* [Exclude binaries (--scope-exclude-binaries)](#scope-exclude-binaries)
|
|
* [Redundant (--redundant)](#redundant)
|
|
* [Redundant (--redundant)](#redundant)
|
|
* [Auto-redundant (--auto-redundant)](#auto-redundant)
|
|
* [Auto-redundant (--auto-redundant)](#auto-redundant)
|
|
* [Example](#auto-redundant_example)
|
|
* [Example](#auto-redundant_example)
|
... | @@ -118,7 +119,6 @@ in the [knowledge base](http://support.arachni-scanner.com/kb/). |
... | @@ -118,7 +119,6 @@ in the [knowledge base](http://support.arachni-scanner.com/kb/). |
|
* [Coverage](#coverage)
|
|
* [Coverage](#coverage)
|
|
* [Audit cookies extensively (--audit-cookies-extensively)](#audit-cookies-extensively)
|
|
* [Audit cookies extensively (--audit-cookies-extensively)](#audit-cookies-extensively)
|
|
* [Fuzz methods (--fuzz-methods)](#fuzz-methods)
|
|
* [Fuzz methods (--fuzz-methods)](#fuzz-methods)
|
|
* [Exclude binaries (--exclude-binaries)](#exclude-binaries)
|
|
|
|
* [Modules](#modules)
|
|
* [Modules](#modules)
|
|
* [List modules (--lsmod)](#lsmod)
|
|
* [List modules (--lsmod)](#lsmod)
|
|
* [Example](#lsmod_example)
|
|
* [Example](#lsmod_example)
|
... | @@ -623,7 +623,7 @@ Allow the system to include subdomains in the scan. |
... | @@ -623,7 +623,7 @@ Allow the system to include subdomains in the scan. |
|
|
|
|
|
Excludes resources whose URL matches any of these patterns.
|
|
Excludes resources whose URL matches any of these patterns.
|
|
|
|
|
|
<h3 id='exclude-content-pattern'><a href='#exclude-content-pattern'>Exclude page by content (--exclude-content-pattern)</a></h3>
|
|
<h3 id='scope-exclude-content-pattern'><a href='#scope-exclude-content-pattern'>Exclude page by content (--scope-exclude-content-pattern)</a></h3>
|
|
|
|
|
|
**Expects**: `pattern`
|
|
**Expects**: `pattern`
|
|
|
|
|
... | @@ -633,6 +633,19 @@ Excludes resources whose URL matches any of these patterns. |
... | @@ -633,6 +633,19 @@ Excludes resources whose URL matches any of these patterns. |
|
|
|
|
|
Excludes pages whose content matches any of the given patterns.
|
|
Excludes pages whose content matches any of the given patterns.
|
|
|
|
|
|
|
|
<h3 id='scope-exclude-binaries'><a href='#scope-exclude-binaries'>Exclude binaries (--scope-exclude-binaries)</a></h3>
|
|
|
|
|
|
|
|
**Expects**: `<n/a>`
|
|
|
|
|
|
|
|
**Default**: `disabled`
|
|
|
|
|
|
|
|
**Multiple invocations?**: `no`
|
|
|
|
|
|
|
|
|
|
|
|
Excludes pages with binary content.
|
|
|
|
|
|
|
|
**Note**: Binary content can confuse passive check that perform pattern matching.
|
|
|
|
|
|
<h3 id='redundant'><a href='#redundant'>Redundant (--redundant)</a></h3>
|
|
<h3 id='redundant'><a href='#redundant'>Redundant (--redundant)</a></h3>
|
|
|
|
|
|
**Expects**: `regexp:integer`
|
|
**Expects**: `regexp:integer`
|
... | @@ -854,19 +867,6 @@ HTTP request methods. |
... | @@ -854,19 +867,6 @@ HTTP request methods. |
|
|
|
|
|
**Warning**: Will severely increase the scan-time.
|
|
**Warning**: Will severely increase the scan-time.
|
|
|
|
|
|
<h3 id='exclude-binaries'><a href='#exclude-binaries'>Exclude binaries (--exclude-binaries)</a></h3>
|
|
|
|
|
|
|
|
**Expects**: `<n/a>`
|
|
|
|
|
|
|
|
**Default**: `disabled`
|
|
|
|
|
|
|
|
**Multiple invocations?**: `no`
|
|
|
|
|
|
|
|
|
|
|
|
Disables inclusion of binary HTTP response bodies in the audit.
|
|
|
|
|
|
|
|
**Note**: Binary content can confuse recon modules that perform pattern matching.
|
|
|
|
|
|
|
|
<h2 id='modules'><a href='#modules'>Modules</a></h2>
|
|
<h2 id='modules'><a href='#modules'>Modules</a></h2>
|
|
|
|
|
|
<h3 id='lsmod'><a href='#lsmod'>List modules (--lsmod)</a></h3>
|
|
<h3 id='lsmod'><a href='#lsmod'>List modules (--lsmod)</a></h3>
|
... | | ... | |