Friday, October 19, 2012

Arachni Version 0.4.1.1

  • Friday, October 19, 2012
  • asd
  • Share

  • Arachni scanner updated to version 0.4.1.1 Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. Arachni is smart, it trains itself by learning from the HTTP responses it receives during the audit process and is able to perform meta-analysis using a number of factors in order to correctly assess the trustworthiness of results and intelligently identify false-positives.



    Unlike other scanners, it takes into account the dynamic nature of web applications, can detect changes caused while travelling through the paths of a web application's cyclomatic complexity and is able to adjust itself accordingly. This way attack/input vectors that would otherwise be undetectable by non-humans are seamlessly handled by Arachni.

    Change log:
    Auditor#log and Auditor#log_remote_file bugfixed to pass a Hash of the response headers instead of a String — also solving another bug causing response bodies not to be logged in the Issues. [Issue #294]
    Issue — Response headers are now always Hash.
    Reports
    HTML — Removed response headers handling code and added the option to not include HTTP response bodies. [Issue #296]
    XML — Removed response headers handling code and added the option to not include HTTP response bodies. [Issue #296]
    HTTP debugging output now includes Response data. [Issue #297]
    Executables
    arachni_rpcd_monitor — Laxed standards enforced on the Dispatcher URL argument. [Issue #293]
    Path extractors
    Added path extractor for the area HTML tag (href attribute). [Issue #300]
    Download Arachni version 0.4.1.1

    Download Arachni Version 0.4.1.1

    0 Responses to “Arachni Version 0.4.1.1”

    Post a Comment