why no issues result in my code?
Hi ,
below is my code:
def launch_audit(host,path)
opts = Arachni::Options.instance
opts.url = host
opts.audit.elements :links, :forms, :headers, :cookies
opts.scope.restrict_paths = path
framework = Arachni::Framework.new(opts)
framework.checks.load(['xss'])
framework.run()
puts "Found: " + framework.report.issues.map { |i| i.name }.join( ', ' )
end
call above function:
launch_audit("http://www.testfire.net","/search.aspx")
The result is : only print "Found" string, no any xss vulnerabilities name.
but use command CLI is ok(find a xss vulerabilities),
arachni http://www.testfire.net --checks=xss --scope-restrict-paths="test.txt"
what's problem?
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
? | Show this help |
---|---|
ESC | Blurs the current field |
Comment Form
r | Focus the comment reply box |
---|---|
^ + ↩ | Submit the comment |
You can use Command ⌘
instead of Control ^
on Mac
Support Staff 1 Posted by Tasos Laskos on 11 Sep, 2014 01:55 PM
I'm terribly sorry about that, there were some debugging methods missing when running Arachni without an output interface.
I've just fixed it: https://github.com/Arachni/arachni/commit/8f02ede4aa2c5b0bd5ee3db40...
Thank you for the feedback.
Tasos Laskos closed this discussion on 11 Sep, 2014 01:55 PM.