Home → Problems →

Arachni Flow

• Edit

Ramakrishna

26 May, 2014 09:27 AM

Hi Team,
I am following https://github.com/Arachni/arachni (arachni), can you please let me know the flow of arachni when i am running a scan.

    Thanks for your supporting.

1. Support Staff 1 Posted by Tasos Laskos on 26 May, 2014 10:22 AM

   

   It's basically a 2 part process, it firstly goes over all pages it can find via the crawler and then goes over all discovered pages and audits their links, forms, cookies etc.

   A crawl-like operation may take place during the audit, because Arachni will keep an eye out in case new elements appear as a result of the audit.

   For more details, you can pass the --debug flag to the arachni executable and the messages should let you know exactly what is going on.

   Does that answer your question?

   Cheers

   • Edit

2. 2 Posted by Ramakrishna on 26 May, 2014 10:39 AM

   

   There is little bit confusion because all the script is having a name more than once.suppose arachni is in bin folder and in spec there is a folder named arachni,what i am going to ask that flow suppose in bin folder there is file like arachni, arachni_rpc,arachni_rpcd...please tell me that what is the first file to call in arachni. it is fine if any flow chart.

   Thank you.please do the needful.

   • Edit

3. Support Staff 3 Posted by Tasos Laskos on 26 May, 2014 10:49 AM

   

   I'm having a hard time understanding you, are you asking which script to run in order to perform a scan?

   • Edit

4. 4 Posted by Ramakrishna on 26 May, 2014 11:30 AM

   

   I am running arachni script to run a scan,scan is running successful and i am getting the report everything fine. but i want to know when the scan is running in arachni 2 modules are called audit and recon.am i right? ,in the audit and recon what is the secquence of calling,apart from this some files also running which are outside these 2 modules.finally clear me the flow from starting the scan to ending the scan.

   • Edit

5. Support Staff 5 Posted by Tasos Laskos on 26 May, 2014 09:58 PM

   

   Ah OK, well, this is what's going on:

   • Run the plugins in the background.
   • Start the crawl and wait for it to finish.
   • Go over each page discovered by the crawler.
   • Pass each page to the selected modules to be checked.
     • Default is to use all modules.
   • Generate the reports.
   • Edit

6. Tasos Laskos closed this discussion on 27 Jun, 2014 11:30 PM.