tag:support.arachni-scanner.com,2012-07-01:/discussions/questions/15-limiting-arachni-scan-to-1-urlArachni: Discussion 2012-09-26T13:43:48Ztag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T15:24:44Z2012-09-25T15:24:44ZLimiting arachni scan to 1 url<div><p>Have you tried using <code>--link-count=1</code>?</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T15:34:28Z2012-09-25T15:34:32ZLimiting arachni scan to 1 url<div><p>I must apologize, I found an open discussion in Google groups
right after I sent my question dealing with the same thing and it
outlined the --link-count=1 it also included limiting the modules
by using -m xss_* so I modified that for what I was trying to do.
This is the command I used to launch arachni:</p>
<p>./arachni -v -g --link-count=1 -m sqli_*
--report=html:outfile=2012-09-25_getAddress_001.html</p>
<p>It appears to work as the scan comes back much faster but it
does not create the report. I am using a variation of the command I
have been using to do the whole site so I know the report part
works. I am wondering if the -m sqli_* right before the report
parameter is causing an issue?</p>
<p>As always than you for the great tool and taking the time to
respond!</p></div>Lee Michelstag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T15:40:53Z2012-09-25T15:40:53ZLimiting arachni scan to 1 url<div><p>I changed the wildcards a bit since then because matching was
flawed, try <code>sqli*</code>.<br>
Also, what do you mean it doesn't generate a report? At all or it
doesn't include any vulns?</p>
<p>If it doesn't create anything at all then there's a serious
problem somewhere, if the report doesn't include any logged issues
then it's because of the wildcard matching approach I
mentioned.</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T15:49:09Z2012-09-25T15:49:09ZLimiting arachni scan to 1 url<div><p>Also, since we're on (or near) the subject, you can use the
<code>rescan</code> plug-in to save yourself the trouble of
crawling everytime. You just pass it the first AFR report (which
resulted from a full crawl) and it'll use its sitemap instead of
crawling.</p>
<p>Doesn't strictly apply to your question but I'm guessing that
you'll want to perform a last full sweep at the end of your
bugfixing, so it could be useful then. ;)</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T15:59:44Z2012-09-25T15:59:45ZLimiting arachni scan to 1 url<div><p>Looks like my last response didn't make it. There is no report
at all. There is an .afr file but no html report.</p>
<p>I will try the <code>sqli*</code> change and see what happens. I
had actually tried to modify that portion on my own and am now in
the middle of what appears to be a full scan so it will be a bit
before I can try.</p>
<p>Thanks for the tip on using <code>rescan</code> that will save a
TON of time!</p></div>Lee Michelstag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T16:02:50Z2012-09-25T16:02:50ZLimiting arachni scan to 1 url<div><p>Which version are you using? Could you try using the <a href=
"http://downloads.arachni-scanner.com/nightlies/">nightlies</a>?<br>
They're stable now and will be released as v0.4 in a few days.</p></div>Tasos Laskostag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-25T16:07:46Z2012-09-25T16:07:47ZLimiting arachni scan to 1 url<div><p>I am using <code>v0.4.1dev</code> but I think I downloaded it in
early September so I will grab a new one and give that a go.</p></div>Lee Michelstag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-26T13:33:33Z2012-09-26T13:33:35ZLimiting arachni scan to 1 url<div><p>Ok, I grabbed a new nightly and rearranged my command to launch
the scan and it looks like it is working on just one url now and
the report is being generated. The report is blank but I am hoping
that the reason is that I have taken care of the vulnerability
:)</p>
<p>Thank you so much for your help and your great software!</p></div>Lee Michelstag:support.arachni-scanner.com,2012-07-01:Comment/190314482012-09-26T13:43:29Z2012-09-26T13:43:29ZLimiting arachni scan to 1 url<div><p>Good, that's good. :)<br>
Let me know if you need further help.</p></div>Tasos Laskos