Why not allow localhost scans
I'd like to be able to scan via localhost and/or 127.0.0.1 so that I can test my web app before it goes live. Is there any technical reason why I loopback scanning is not allowed?
I've tried using 127.0.0.2 per these support issues: 12687 and 12704 but this did not work. Here's the stack trace that was given on upon failure:
/arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/lib/arachni/options.rb:223:in `url=': Loopback interfaces (like 127.0.0.2) are not supported, please use a different IP address or hostname. (Arachni::Options::Error::ReservedHostname)
from /arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/ui/cli/framework/option_parser.rb:701:in `after_parse'
from /arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/ui/cli/option_parser.rb:75:in `parse'
from /arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/ui/cli/framework.rb:426:in `parse_options'
from /arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/ui/cli/framework.rb:32:in `initialize'
from /arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/bin/arachni:12:in `new'
from /arachni-build-dir/arachni/system/gems/bundler/gems/arachni-d641941154fe/bin/arachni:12:in `<top (required)>'
from /arachni-build-dir/arachni/bin/../system/arachni-ui-web/bin/arachni:17:in `load'
from /arachni-build-dir/arachni/bin/../system/arachni-ui-web/bin/arachni:17:in `<main>'
Arachni - Web Application Security Scanner Framework v2.0dev
Author: Tasos "Zapotek" Laskos <[email blocked]>
(With the support of the community and the Arachni Team.)
Website: http://arachni-scanner.com
Documentation: http://arachni-scanner.com/wiki
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
1 Posted by Mak on 27 Apr, 2017 06:15 AM
I have the same issue. Please help!
Support Staff 2 Posted by Tasos Laskos on 27 Apr, 2017 10:20 AM
PhantonJS disregards the proxy when making requests to loopback interfaces so Arachni can't control it. This isn't an issue though as you can use any local interface or hostname, just not loopback ones.
Tasos Laskos closed this discussion on 27 Apr, 2017 10:20 AM.