why no issues result in my code?

drewz's Avatar

drewz

11 Sep, 2014 07:14 AM

Hi ,

below is my code:
   def launch_audit(host,path)
    opts = Arachni::Options.instance
    opts.url = host
    opts.audit.elements :links, :forms, :headers, :cookies
            opts.scope.restrict_paths = path
    framework = Arachni::Framework.new(opts)
            framework.checks.load(['xss'])
    framework.run()
    puts "Found: " + framework.report.issues.map { |i| i.name }.join( ', ' )
end
  call above function:
      launch_audit("http://www.testfire.net","/search.aspx")
 The result is : only print "Found" string, no any xss vulnerabilities name.
 but use command CLI is ok(find a xss vulerabilities), 
     arachni http://www.testfire.net --checks=xss --scope-restrict-paths="test.txt"
what's problem?
  1. Support Staff 1 Posted by Tasos Laskos on 11 Sep, 2014 01:55 PM

    Tasos Laskos's Avatar

    I'm terribly sorry about that, there were some debugging methods missing when running Arachni without an output interface.

    I've just fixed it: https://github.com/Arachni/arachni/commit/8f02ede4aa2c5b0bd5ee3db40...

    Thank you for the feedback.

  2. Tasos Laskos closed this discussion on 11 Sep, 2014 01:55 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac