Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Wiki
  • Guides
  • User
  • Command line user interface

Command line user interface · Changes

Page history
Added http-queue-size option authored Nov 09, 2013 by Tasos Laskos's avatar Tasos Laskos
Show whitespace changes
Inline Side-by-side
guides/user/Command-line-user-interface.md
View page @ f4810d98
...@@ -74,7 +74,8 @@ in your gems path._ ...@@ -74,7 +74,8 @@ in your gems path._
#### More resources #### More resources
For more resources you can consult the [articles](http://support.arachni-scanner.com/kb/general-use) in the [knowledge base](http://support.arachni-scanner.com/kb/). For more resources you can consult the [articles](http://support.arachni-scanner.com/kb/general-use)
in the [knowledge base](http://support.arachni-scanner.com/kb/).
### Command reference ### Command reference
...@@ -87,6 +88,7 @@ For more resources you can consult the [articles](http://support.arachni-scanner ...@@ -87,6 +88,7 @@ For more resources you can consult the [articles](http://support.arachni-scanner
* [Debug mode (--debug)](#debug) * [Debug mode (--debug)](#debug)
* [Only positives (--only-positives)](#only-positives) * [Only positives (--only-positives)](#only-positives)
* [HTTP request limit (--http-req-limit)](#http-req-limit) * [HTTP request limit (--http-req-limit)](#http-req-limit)
* [HTTP request queue size (--http-queue-size)](#http-queue-size)
* [HTTP request timeout (--http-timeout)](#http-timeout) * [HTTP request timeout (--http-timeout)](#http-timeout)
* [HTTPS only (--https-only)](#https-only) * [HTTPS only (--https-only)](#https-only)
* [Cookie jar (--cookie-jar)](#cookie-jar) * [Cookie jar (--cookie-jar)](#cookie-jar)
...@@ -445,6 +447,19 @@ Limit how many concurrent HTTP request are sent. ...@@ -445,6 +447,19 @@ Limit how many concurrent HTTP request are sent.
**Warning**: Given enough bandwidth and a high limit it could cause a DoS. **Warning**: Given enough bandwidth and a high limit it could cause a DoS.
Be careful when setting this option too high, don't kill your server. Be careful when setting this option too high, don't kill your server.
<h3 id='http-queue-size'><a href='#http-queue-size'>HTTP request queue size (--http-queue-size)</a></h3>
**Expects**: `integer`
**Default**: `500`
**Multiple invocations?**: `no`
Maximum amount of HTTP requests to keep in the queue.
**Note**: More means better scheduling and better performance, fewer means less RAM consumption.
<h3 id='http-timeout'><a href='#http-timeout'>HTTP timeout (--http-timeout)</a></h3> <h3 id='http-timeout'><a href='#http-timeout'>HTTP timeout (--http-timeout)</a></h3>
**Expects**: `integer (milliseconds)` **Expects**: `integer (milliseconds)`
...@@ -2496,7 +2511,7 @@ Tells Arachni what protocol to use to connect and comunicate with the proxy serv ...@@ -2496,7 +2511,7 @@ Tells Arachni what protocol to use to connect and comunicate with the proxy serv
``` ```
$ arachni -h $ arachni -h
Arachni - Web Application Security Scanner Framework v0.4.3 Arachni - Web Application Security Scanner Framework v1.0dev
Author: Tasos "Zapotek" Laskos <tasos.laskos@gmail.com> Author: Tasos "Zapotek" Laskos <tasos.laskos@gmail.com>
(With the support of the community and the Arachni Team.) (With the support of the community and the Arachni Team.)
...@@ -2524,11 +2539,20 @@ Arachni - Web Application Security Scanner Framework v0.4.3 ...@@ -2524,11 +2539,20 @@ Arachni - Web Application Security Scanner Framework v0.4.3
--only-positives Echo positive results *only*. --only-positives Echo positive results *only*.
--http-username=<string> Username for HTTP authentication.
--http-password=<string> Password for HTTP authentication.
--http-req-limit=<integer> Concurrent HTTP requests limit. --http-req-limit=<integer> Concurrent HTTP requests limit.
(Default: 20) (Default: 20)
(Be careful not to kill your server.) (Be careful not to kill your server.)
(*NOTE*: If your scan seems unresponsive try lowering the limit.) (*NOTE*: If your scan seems unresponsive try lowering the limit.)
--http-queue-size=<integer> Maximum amount of requests to keep in the queue.
Bigger size means better scheduling and better performance,
smaller means less RAM consumption.
(Default: 500)
--http-timeout=<integer> HTTP request timeout in milliseconds. --http-timeout=<integer> HTTP request timeout in milliseconds.
--cookie-jar=<filepath> Netscape HTTP cookie file, use curl to create it. --cookie-jar=<filepath> Netscape HTTP cookie file, use curl to create it.
...@@ -2544,9 +2568,9 @@ Arachni - Web Application Security Scanner Framework v0.4.3 ...@@ -2544,9 +2568,9 @@ Arachni - Web Application Security Scanner Framework v0.4.3
Specify custom headers to be included in the HTTP requests. Specify custom headers to be included in the HTTP requests.
(Can be used multiple times.) (Can be used multiple times.)
--authed-by=<string> Who authorized the scan, include name and e-mail address. --authed-by=<string> E-mail address of the person who authorized the scan.
(It'll make it easier on the sys-admins during log reviews.) (It'll make it easier on the sys-admins during log reviews.)
(Will be appended to the user-agent string.) (Will be used as a value for the 'From' HTTP header.)
--login-check-url=<url> A URL used to verify that the scanner is still logged in to the web application. --login-check-url=<url> A URL used to verify that the scanner is still logged in to the web application.
(Requires 'login-check-pattern'.) (Requires 'login-check-pattern'.)
...@@ -2609,7 +2633,7 @@ Arachni - Web Application Security Scanner Framework v0.4.3 ...@@ -2609,7 +2633,7 @@ Arachni - Web Application Security Scanner Framework v0.4.3
--extend-paths=<filepath> Add the paths in <file> to the ones discovered by the crawler. --extend-paths=<filepath> Add the paths in <file> to the ones discovered by the crawler.
(Can be used multiple times.) (Can be used multiple times.)
--interceptor.callict-paths=<filepath> Use the paths in <file> instead of crawling. --restrict-paths=<filepath> Use the paths in <file> instead of crawling.
(Can be used multiple times.) (Can be used multiple times.)
--https-only Forces the system to only follow HTTPS URLs. --https-only Forces the system to only follow HTTPS URLs.
...@@ -2657,8 +2681,8 @@ Arachni - Web Application Security Scanner Framework v0.4.3 ...@@ -2657,8 +2681,8 @@ Arachni - Web Application Security Scanner Framework v0.4.3
(Can be used multiple times.) (Can be used multiple times.)
-m <modname,modname..> -m <modname,modname,...>
--modules=<modname,modname..> --modules=<modname,modname,...>
Comma separated list of modules to load. Comma separated list of modules to load.
(Modules are referenced by their filename without the '.rb' extension, use '--lsmod' to list all. (Modules are referenced by their filename without the '.rb' extension, use '--lsmod' to list all.
...@@ -2726,6 +2750,4 @@ Arachni - Web Application Security Scanner Framework v0.4.3 ...@@ -2726,6 +2750,4 @@ Arachni - Web Application Security Scanner Framework v0.4.3
--proxy-type=<type> Proxy type; can be http, http_1_0, socks4, socks5, socks4a --proxy-type=<type> Proxy type; can be http, http_1_0, socks4, socks5, socks4a
(Default: http) (Default: http)
```
```
Clone repository

Pages [all]

  • Home
  • Installation instructions
  • For users
    • Executables
    • Command Line Interface
    • Web User Interface
    • Distributed components (Dispatchers and Instances)
      • RPC Client
      • RPC Server (Dispatcher)
  • For developers
    • Coding guidelines
    • Core API documentation
    • RPC API
    • Development environment

Can't find what you're looking for? Why not have a look at the support portal?