Web Application Security Scanner Tutorial | Testing with Arachni

What is Arachni?

In very simple terms, Arachni is a tool that allows you to assess the security of web applications. 

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.

It is a system which started out as an educational exercise and as a way to perform specific security tests against a web application in order to identify, classify and log issues of security interest.

So in this article I will show you how to get and install arachni and how to launch your first attack against a web application.

 Arachni is a tool that allows you to assess the security of web applications.

First DownloadArachni

Now Just use below code, I am using Backtrack 5

root@bt:~/Downloads/arachni-v0.4.0.2-cde# sh arachni_web

Now the question is how to edit Dispatchers of Arachni because without dispatchers arachni does not work.

root@bt:~/Downloads/arachni-v0.4.0.2-cde# sh arachni_rpcd

Now click on the plug ins to choose the best plug ins then click on the module to select and unselected modules depends on your need.

Now click on the start scan to run your first scan enter the URL of the target web application then simply start the attack, after sometimes you need to evaluate the report to get the vulnerabilities.