Arachni: Discussion

Arachni is running so long even with the latest version 0.4.1.3

2013-03-13T20:35:36Z

I logged in to the server you gave me, and I don't know how to put this in a way that won't make you want to hurt yourself, but all this time you were working the wrong package.

All the systems you were using were 64bit ones but you kept downloading the 32bit package from http://downloads.arachni-scanner.com/nightlies/.

Download the 64bit package and you'll be fine.

Arachni is running so long even with the latest version 0.4.1.3

2013-03-13T20:41:52Z

Thanks Tasos,

I am downloading the 64 bit package and will let you know if i find out any issue.

Arachni is running so long even with the latest version 0.4.1.3

2013-03-13T20:51:57Z

Thanks Tasos,

Its working fine, Hope limit-count command will work on this build.

Thank you so much!!!!

Arachni is running so long even with the latest version 0.4.1.3

2013-03-13T20:53:07Z

No worries, glad you got it working.

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T13:59:31Z

Hi Tasos,

We are able to execute the ./arachni command manually but when we are trying to execute the same command from php code, we are getting the below error; it would be great if you can also please help us on this:

/var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler.rb:272: warning: Insecure world writable dir /var/www in PATH, mode 040777
/var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/source/git.rb:176:in `rescue in load_spec_files': git://github.com/Arachni/arachni-rpc-em.git (at master) is not checked out. Please run `bundle install` (Bundler::GitError)
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/source/git.rb:174:in `load_spec_files'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/source/path.rb:86:in `local_specs'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/source/git.rb:149:in `specs'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/lazy_specification.rb:52:in `__materialize__'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/spec_set.rb:88:in `block in materialize'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/spec_set.rb:85:in `map!'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/spec_set.rb:85:in `materialize'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/definition.rb:114:in `specs'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/definition.rb:159:in `specs_for'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/definition.rb:148:in `requested_specs'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/environment.rb:18:in `requested_specs'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/runtime.rb:13:in `setup'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler.rb:120:in `setup'
    from /var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler/setup.rb:17:in `<top (required)>'
    from /var/www/arachni-1.0dev-0.4dev/system/usr/lib/ruby/site_ruby/1.9.1/rubygems/core_ext/kernel_require.rb:110:in `require'
    from /var/www/arachni-1.0dev-0.4dev/system/usr/lib/ruby/site_ruby/1.9.1/rubygems/core_ext/kernel_require.rb:110:in `rescue in require'
    from /var/www/arachni-1.0dev-0.4dev/system/usr/lib/ruby/site_ruby/1.9.1/rubygems/core_ext/kernel_require.rb:35:in `require'
    from /var/www/arachni-1.0dev-0.4dev/bin/../system/arachni-ui-web/bin/arachni:14:in `<main>'

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T14:11:34Z

Looks like you're running system/arachni-ui-web/bin/arachni directly, is that right?

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T14:32:01Z

There is a "system()" function in PHP which we are using to run arachni on linux console:

$cm2="./arachni --mods=sqli_* http://testphp.vulnweb.com/ --report=xml:outfile=gopal_jorxn2ys_58_1_autarachni_Sql.xml";

$abc2=system($cm2);

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T14:43:48Z

Still, that doesn't tell me what script you're executing, what dir are you running it from?
What does system( 'pwd' ); say?

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T14:46:33Z

Here is the output of system('pwd'):

command is: pwd
results is: /var/www/arachni-1.0dev-0.4dev/bin

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T14:56:23Z

This is an environment issue and I've no idea how to help you fix it but could you try running:
php5 -r "system( './arachni -h' );"

From the same dir but from the command-line rather than via Apache.

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T15:04:30Z

This command is working on command line with the below warning:

/var/www/arachni-1.0dev-0.4dev/system/gems/gems/bundler-1.3.4/lib/bundler.rb:272: warning: Insecure world writable dir /var/www in PATH, mode 040777 WARNING: Nokogiri was built against LibXML version 2.8.0, but has dynamically loaded 2.7.8

Arachni is running so long even with the latest version 0.4.1.3

2013-03-18T15:09:39Z

The Nokogiri warning isn't a problem, the first one though could be.
I've very little experience with Apache's intricacies so you'll need to ask someone else as to why the CLI PHP interpreter works but the same thing explodes when running it via Apache.

I suggest you ask at StackOverflow.