tag:support.arachni-scanner.com,2012-07-01:/discussions/problems/4300-arachni-rest-api-arachni-webui-integrationArachni: Discussion 2017-07-31T07:29:26Ztag:support.arachni-scanner.com,2012-07-01:Comment/430433922017-07-20T16:01:09Z2017-07-20T16:01:10ZArachni Rest API & Arachni WebUI integration<div><p>Hi Arachni Team!</p>
<p>Currently I am utilizing your Arachni scan for doing some security Audits on some websites. I have moved over to the WebUI because it contributes to the auditing and debugging experience. However I am having one problem with it that I would like to inquire as to a its resolution. Namely this problem is that sometime the Arachni scan adds an excess load to servers running the site. This is problematic and I would like to automate some mechanism for pausing the scan when the threshold is breached.</p>
<p>My first thought was to have an excess load trigger the execution of a REST api command to pause a scan being run by an arachni_web instance. However I soon realized that the REST server does not share context with the WebUI server via the default settings. I am wondering if this is possible because if it were it would enable some pretty useful synchronization with the server on my end and Arachni's server instance.</p>
<p>Also I see in the README that Arachni had the capacity to 'With the ability to auto-detect server health and adjust its concurrency automatically'. For some reason I did not see how to implement this feature in my scan profile. Also I may be misinterpreting its meaning of server as corresponding to my server when it is meaning Arachni's server.</p>
<p>Finally if this integration between my server health, REST calls and the WebUI instance is not something readily configurable, I was planning on pursuing it anyway. This is because I like the WebUI and do not want to move to REST API usage. I see that I could implement via Python a program to login to the site and pause it manually. This would entail significantly more amount of overhead so I was wondering if you had any other ideas on how I might accomplish this goal.</p>
<p>Thanks for your help and sharing your tool with me!</p></div>Charlestag:support.arachni-scanner.com,2012-07-01:Comment/430433922017-07-31T07:29:24Z2017-07-31T07:29:24ZArachni Rest API & Arachni WebUI integration<div><p>The system will automatically throttle itself down if it senses that the remove server is having a hard time, that's on by default.</p>
<p>As for what you're trying to do, I'm afraid it's not possible in a straightforward way, like you said the 2 interfaces do not share any context.</p></div>Tasos Laskos