Arachni Flow

Ramakrishna's Avatar


26 May, 2014 09:27 AM

Hi Team,
I am following (arachni), can you please let me know the flow of arachni when i am running a scan.

    Thanks for your supporting.
  1. Support Staff 1 Posted by Tasos Laskos on 26 May, 2014 10:22 AM

    Tasos Laskos's Avatar

    It's basically a 2 part process, it firstly goes over all pages it can find via the crawler and then goes over all discovered pages and audits their links, forms, cookies etc.

    A crawl-like operation may take place during the audit, because Arachni will keep an eye out in case new elements appear as a result of the audit.

    For more details, you can pass the --debug flag to the arachni executable and the messages should let you know exactly what is going on.

    Does that answer your question?


  2. 2 Posted by Ramakrishna on 26 May, 2014 10:39 AM

    Ramakrishna's Avatar

    There is little bit confusion because all the script is having a name more than once.suppose arachni is in bin folder and in spec there is a folder named arachni,what i am going to ask that flow suppose in bin folder there is file like arachni, arachni_rpc,arachni_rpcd...please tell me that what is the first file to call in arachni. it is fine if any flow chart.

    Thank you.please do the needful.

  3. Support Staff 3 Posted by Tasos Laskos on 26 May, 2014 10:49 AM

    Tasos Laskos's Avatar

    I'm having a hard time understanding you, are you asking which script to run in order to perform a scan?

  4. 4 Posted by Ramakrishna on 26 May, 2014 11:30 AM

    Ramakrishna's Avatar

    I am running arachni script to run a scan,scan is running successful and i am getting the report everything fine. but i want to know when the scan is running in arachni 2 modules are called audit and i right? ,in the audit and recon what is the secquence of calling,apart from this some files also running which are outside these 2 modules.finally clear me the flow from starting the scan to ending the scan.

  5. Support Staff 5 Posted by Tasos Laskos on 26 May, 2014 09:58 PM

    Tasos Laskos's Avatar

    Ah OK, well, this is what's going on:

    • Run the plugins in the background.
    • Start the crawl and wait for it to finish.
    • Go over each page discovered by the crawler.
    • Pass each page to the selected modules to be checked.
      • Default is to use all modules.
    • Generate the reports.
  6. Tasos Laskos closed this discussion on 27 Jun, 2014 11:30 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts


? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac