Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Wiki
  • Guides
  • User
  • Command line user interface

Command line user interface · Changes

Page history
Updated Command-line-user-interface (markdown) authored Aug 02, 2014 by Tasos Laskos's avatar Tasos Laskos
Show whitespace changes
Inline Side-by-side
guides/user/Command-line-user-interface.md
View page @ 4cbf01fb
## Version 0.4.6
## Version 1.0
There are a lot of options, customizations and tweaks you can use but fear not and don't let yourself be overwhelmed.
This guide will walk you through each and every one of them and teach you how to use them in order to make your scans as efficient as possible.
_If you intend to scan big and complex sites it's best that you read through this guide and evaluate all available options._
......@@ -20,42 +19,41 @@ You can simply run Arachni like so:
$ arachni http://test.com
which will load all modules, the plugins under `/plugins/defaults` and audit
which will load all checks, the plugins under `/plugins/defaults` and audit
all forms, links and cookies.
In the following example all modules will be run against _http://test.com_,
auditing links/forms/cookies and following subdomains --with verbose output enabled.
In the following example, all checks will be run against _http://test.com_,
auditing links/forms/cookies and following subdomains while also printing verbose mesages.
The results of the audit will be saved in the the file _test.com.afr_.
The results of the scan will be saved in the the file `test.com.afr`.
$ arachni -fv http://test.com --report=afr:outfile=test.com.afr
arachni --verbose --scope-include-subdomains http://test.com --report-save-path=test.com.afr
The Arachni Framework Report (.afr) file can later be loaded by Arachni to
create a report, like so:
The Arachni Framework Report (`.afr`) file can later be used to create reports in several formats, like so:
$ arachni --repload=test.com.afr --report=html:outfile=my_report.html
arachni_reporter test.com.afr --report=html:outfile=my_report.html
or any other report type as shown by:
To see all available reporter components run:
$ arachni --lsrep
arachni_reporter --reporters-list
#### You can make module loading easier by using wildcards (*) and exclusions (-).
#### You can make check loading easier by using wildcards (*) and exclusions (-).
To load all `xss` modules using a wildcard:
To load all `xss` checks using a wildcard:
$ arachni http://example.net --modules=xss*
arachni http://example.net --checks=xss*
To load all _audit_ modules using a wildcard:
To load all active checks using a wildcard:
$ arachni http://example.net --modules=audit/*
arachni http://example.net --checks=active/*
To exclude only the _csrf_ module:
To exclude only the `csrf` check:
$ arachni http://example.net --modules=*,-csrf
arachni http://example.net --checks=*,-csrf
Or you can mix and match; to run everything but the _xss_ modules:
Or you can mix and match; to run everything but the `xss` checks:
$ arachni http://example.net --modules=*,-xss*
arachni http://example.net --checks=*,-xss*
#### Performing a full scan quickly
......
Clone repository

Pages [all]

  • Home
  • Installation instructions
  • For users
    • Executables
    • Command Line Interface
    • Web User Interface
    • Distributed components (Dispatchers and Instances)
      • RPC Client
      • RPC Server (Dispatcher)
  • For developers
    • Coding guidelines
    • Core API documentation
    • RPC API
    • Development environment

Can't find what you're looking for? Why not have a look at the support portal?