Arachni

1. Arachni Introduction

Free, Simple, Distributed, Intelligent, Powerful, Friendly.

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of modern web applications.

It is free, with its source code public and available for review.

It is multi-platform, supporting all major operating systems (MS Windows, Mac OS X and Linux) and distributed via portable packages which allow for instant deployment.

It is versatile enough to cover a great deal of use cases, ranging from a simple command line scanner utility, to a global high performance grid of scanners, to a Ruby library allowing for scripted audits, to a multi-user multi-scan web collaboration platform. In addition, its simple REST API makes integration a cinch.

Finally, due to its integrated browser environment, it can support highly complicated web applications which make heavy use of technologies such as JavaScript, HTML5, DOM manipulation and AJAX.

2. Installation and configuration

  • Unzip and start Arachni's web backend script

    Unzip, go to the bin file, and execute the ./arachni_webscript

  • Configure profile, create scanning policy, specify scanning site

    Enter localhost:9292 in the address bar, and log in with the default account password

    Click on profiles and select "NEW" to create a new profile

    Fill in some required fields for scanning, such as: directory depth, automatic redundant path, page limit, etc.

    That is, fingerprint information: built a LAMP architecture of the site in the case of non-selected system, MySQL, Apache, PHP check the box, according to their target target machine check the architecture.

    Scanner plug-in, select all

    Create configuration

    Profileshas been created

    Prohibit illegal scanning of unauthorized URLs.

    "In order to avoid some risks and not affect others running business, here is a website dedicated to test the ability of the scanner vulnerability mining"

    http://www.vulnweb.com/

Configure the corresponding Arachni scanning policies according to different site architectures

3. Verify the scan results

Click on the small eye to see the vulnerability level scanned, vulnerability description, etc.

SQl injection as an example, you can see the location of the presence of injection and test method, SQL injection injection point in the request, jump to the presence of injection page, enter the test content in the address bar, you can see the SQL database returned a response, then you can judge the database there may be non-authorized arbitrary query, you can see that after the complement, there has been a response to the content. At this point, a complete arachni scan test is complete.

4. SQL Description

Today's Web applications require dynamic content, so many rely on database backends to store the data that will be called and processed by the Web application (or other programs.) Web applications retrieve data from databases by using Structured Query Language (SQL) queries.

To meet the needs of many developers, database servers (e.g., MSSQL, MySQL, Oracle, etc.) have additional built-in features that allow extensive control over the database and interaction with the host operating system itself.

SQL injection occurs when values originating from client requests are used in SQL queries without prior filtering. This can allow cybercriminals to execute arbitrary SQL code and steal data, or use other features of the database server to take control of additional server components.

Successful exploitation of SQL injection can be devastating to an organization and is one of the most commonly exploited web application vulnerabilities.

This injection is detected because Arachni is able to inject a specific SQL query that, if vulnerable, will result in a different response for each injection. This is called a blind SQL injection vulnerability.

Reference：

https://blog.csdn.net/weixin_45834340/article/details/103883493

https://blog.csdn.net/kevinhanser/article/details/78010013

https://blog.csdn.net/weixin_45834340/article/details/103866199

https://www.php.cn/xiazai/gongju/fuwuqi

https://cn.wordpress.org/download/releases/

https://cwe.mitre.org/data/definitions/200.html

Attention

arachni has two modes of operation：

Command line mode: run in the bin directory: . /arachni_console

web mode: run in the bin directory: . /arachni_web

Dispatchers
Locally call the host specified by dispatcher to run the arachni scanner as a proxy
Call the arachni scanner on the remote host (127.0.0.1:1111 in this example) to run a scan and view the results locally

arachni_rpcd --address=127.0.0.1 --port=1111 --nickname=test1

kali Start arachni_rpcd

Use Grid to automatically load balance multiple dispatcher

Placing a dispatcher under another dispatcher means that it is in a group (Grid).

arachni_rpcd --nickname=test2 --address=127.0.0.1 --neighbour=127.0.0.1:1111

For multiple dispatchers, use chains to point, 2 to 1, 3 to 2, 4 to 3, etc.

The IP and port connected to the machine that is controlled to participate in the scan. Need to be configured in Dispatchers first.Example: Windows acts as the controller and Mac acts as the controlled. Mac executes the command:/arachni rpcd --adress=191 168.31 155(note · IP address of Mac)--port=1111 --nickname=test1

To view the listening port: netstat -an | grep 80 && netstat -an

Remote access to web interface: arachni_web --host 0.0.0.0 // start arachni web

Default binding is on localhost (127.0.0.1)

README

   Arachni - Web Application Security Scanner Framework

Homepage           - http://arachni-scanner.com
Blog               - http://arachni-scanner.com/blog
Documentation      - https://github.com/Arachni/arachni/wiki
Support            - http://support.arachni-scanner.com
GitHub page        - http://github.com/Arachni/arachni
Code Documentation - http://rubydoc.info/github/Arachni/arachni
Author             - Tasos "Zapotek" Laskos (http://twitter.com/Zap0tek)
Twitter            - http://twitter.com/ArachniScanner
Copyright          - 2010-2022 Ecsypno

License            - Arachni Public Source License v1.0 -- see LICENSE file)
--------------------------------------------------------------------------------

To use Arachni run the executables under "bin/".

To launch the Web interface:
    bin/arachni_web

Default account details:

    Administrator:
        E-mail address: admin@admin.admin
        Password:       administrator
    
    User:
        E-mail address: user@user.user
        Password:       regular_user

For a quick scan: via the command-line interface:
    bin/arachni http://test.com

To see the available CLI options:
    bin/arachni -h

For detailed documentation see:
    http://arachni-scanner.com/wiki/User-guide

Upgrading/migrating
--------------

To migrate your existing data into this new package please see:

    https://github.com/Arachni/arachni-ui-web/wiki/upgrading

Troubleshooting
--------------

See the included TROUBLESHOOTING file.

Disclaimer
--------------

Arachni is free software and you are allowed to use it as you see fit.
However, I can't be held responsible for your actions or for any damage
caused by the use of this software.

Copying
--------------

For the Arachni license please see the LICENSE file.

posted @ 2023-05-23 13:34  LandonXing  阅读(34)  评论(0)    收藏  举报