tag:support.arachni-scanner.com,2012-07-01:/discussions/questions/12636-how-to-find-a-poodle-security-hole-with-arachniArachni: Discussion 2015-11-18T12:01:40Ztag:support.arachni-scanner.com,2012-07-01:Comment/384921872015-11-18T11:27:25Z2015-11-18T11:27:25ZHow to find a Poodle security hole with Arachni?<div><p>Hello,</p>
<p>Arachni can't detect SSL issues because that information isn't
being exposed by the HTTP client it uses.</p>
<p>Also, strictly speaking, an SSL issue isn't a webapp issue but a
server one; Arachni tends to focus on web applications.</p>
<p>Still, there are plans for it, but it may take a while before
it's done.</p>
<p>Cheers</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/384921872015-11-18T11:43:11Z2015-11-18T11:43:14ZHow to find a Poodle security hole with Arachni?<div><p>Hi!</p>
<p>Thank you for your quick and clarifying answer. So, if Arachni
is a tool for scannig web apps and not for web servers, than it
seems to be an obvious idea to combine Arachni with something that
cannot scan web apps but web servers.</p>
<p>Somewhere I read that Nikto is a scanner that performs tests
against web servers, not against web applications. I should
investigate that further. Do you have any recommendation for
something that I can combine with Arachni, or do you think that
Nikto could be a good supplement?</p>
<p>Best regards,<br>
Michael</p></div>Michaeltag:support.arachni-scanner.com,2012-07-01:Comment/384921872015-11-18T11:48:47Z2015-11-18T11:48:47ZHow to find a Poodle security hole with Arachni?<div><p>Yeah using a dedicated tool for server issues would be best,
although that's out of my area of expertise.</p>
<p>From what I hear people tend to use OpenVAS + Arachni to cover
both infrastructure and webapp issues but I don't know if OpenVAS
has specific Poodle checks -- although I believe it does has
generic weak SSL cipher ones.</p>
<p>Cheers</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/384921872015-11-18T12:00:43Z2015-11-18T12:00:44ZHow to find a Poodle security hole with Arachni?<div><p>THX</p>
<p>:-)</p></div>Michaeltag:support.arachni-scanner.com,2012-07-01:Comment/384921872015-11-18T12:01:39Z2015-11-18T12:01:39ZHow to find a Poodle security hole with Arachni?<div><p>No worries, best of luck with your setup.</p>
<p>Cheers</p></div>Tasos Laskos