Home → Questions →

Export found vectors

• Edit

Vojta Polasek

21 Jul, 2016 09:11 AM

Hi,
I would like to use Arachni as a crawler, because it can crawl HTML5 applications etc. I wanted to use the vector_collector plugin, but it does not seem to work. It simply does not produce anything, I tried to scan passive part of Wavsep. Is this the right plugin for me?
Is it somehow possible to export all vectors (forms, UI elements)?
thanks,
Vojta

1. Support Staff 1 Posted by Tasos Laskos on 21 Jul, 2016 09:21 AM

   

   Hello,

   If no checks have been enabled then the hook that this plugin depends on will not be called.
   Try enabling the trainer check.

   Cheers,
   Tasos L.

   • Edit

2. 2 Posted by Vojta Polasek on 21 Jul, 2016 09:27 AM

   

   Hi,
   unfortunately this didn't help. Another strange thing is, that even when I explicitly enabled only autothrottle and vector_collector, I can see results of the healthmap plugin. It is not specified in the configuration file.
   I am running nightly version.
   Vojta

   • Edit

3. Support Staff 3 Posted by Tasos Laskos on 21 Jul, 2016 09:32 AM

   

   Some plugins are on by default, like the healthmap.

   The vector_collector is working fine in my case though, where are you looking for the results?

   • Edit

4. 4 Posted by Vojta Polasek on 21 Jul, 2016 09:36 AM

   

   Hi,
   in the HTML report I look in 'Plugin results'. There is only healthmap mentioned. I will redownload the nightly version.
   Vojta

   • Edit

5. Support Staff 5 Posted by Tasos Laskos on 21 Jul, 2016 09:38 AM

   

   It's there in my case.

   • Edit

6. 6 Posted by Vojta Polasek on 21 Jul, 2016 10:35 AM

   

   Hi,
   well, it finally works, but not on wavsep. I tried to scan http://localhost:8080/wavsep/passive/info/index.jsp and it did not work.
   Vojta

   • Edit

7. 7 Posted by Vojta Polasek on 21 Jul, 2016 11:13 AM

   

   Now when it works, I looked at its output. Could you point me at classes which are used in the output? I mean linkclass, formclass etc. I would like to use Arachni to collect requests during its scan and use them later for Sqlmap. So I need to write some small sw which will extract information useful for Sqlmap from this vector_collector output.
   Thanks,
   Vojta

   • Edit

8. Support Staff 8 Posted by Tasos Laskos on 22 Jul, 2016 02:05 PM

   

   If you go by class, they are:

   • Arachni::Element::Link
   • Arachni::Element::Form
   • Arachni::Element::Cookie
   • Arachni::Element::Header
   • Edit

9. Tasos Laskos closed this discussion on 02 Aug, 2016 03:53 PM.