Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Wiki
  • Guides
  • Developer
  • Developer guide

Developer guide · Changes

Page history
updated for v0.4.1 authored Sep 10, 2012 by Tasos Laskos's avatar Tasos Laskos
Hide whitespace changes
Inline Side-by-side
guides/developer/Developer-guide.md
View page @ 35884b87
Version 0.4
Version 0.4.1
-----------
Welcome to the Developer’s guide.
......@@ -39,12 +39,26 @@ The easiest way to start developing your own component is to pick an
existing one which is closer to your needs and modify it to fit your
requirements.
### Path extractors
Path extractors are used by the spider and their only job is to extract and return
a list of paths from the provided HTML document.
### Modules
Modules are the most important type of component in the framework.<br/>
They assess and log vulnerabilities or other entities of interest during
the scanning process.
They operate under the scope of a page and are passed each page that needs to be
audited.
They are split into 2 categories, _audit_ (active) and _recon_ (passive).
Audit modules actively engage the webapp via its inputs while recon modules
perform discovery related operations like checking for certain patterns in
the page body or look for interesting files and directories on the server.
### Reports
Reports are used to export the results of the audit in a desired format or fashion.
......@@ -62,8 +76,16 @@ it what it pleases.
Via the framework they have access to all Arachni subsystems and can
alter or extend Arachni’s behavior on the fly.
Plug-ins run in parallel to the framework and are executed right before
the scan process starts.
Plug-ins run in parallel to the framework (and each other) and are executed right before
the scan starts.
### [RPCD Handlers](http://support.arachni-scanner.com/kb/rpc-api/writting-dispatcher-rpcd-handlers)
RPCD Handlers are server-side components which have direct access to their parent
Dispatcher and whose API can be exposed via the regular RPC interface.
These components provide a way to extend the server-side functionality with
extra features.
[Core API](http://rubydoc.info/github/Arachni/arachni)
---------------------------------------------------------
......
Clone repository

Pages [all]


  • Home
  • Installation instructions
  • For users
    • Executables
    • Command Line Interface
    • Web User Interface
    • RPC Client
    • RPC Server (Dispatcher)
  • For developers
    • Coding guidelines
    • Core API
    • RPC API
  • Technology
    • The Brains
    • Distributed components (Dispatchers and Instances)
    • High Performance Grid

Can't find what you're looking for? Why not have a look at the support portal?