WebApp Sec mailing list archives

Arachni v0.2 released (Web Application Security Scanner Framework)


From: Tasos Laskos <tasos.laskos () gmail com>
Date: Thu, 14 Oct 2010 19:58:27 +0100

Hi guys,

I'd like to announce the v0.2 release of Arachni, a Web Application Security Scanner Framework written in Ruby.

Download: http://github.com/Zapotek/arachni/downloads

ChangeLog for v0.2:
http://zapotek.github.com/arachni/file.CHANGELOG.html

Homepage: http://github.com/zapotek/arachni
News:     http://trainofthought.segfault.gr/category/projects/arachni/
Documentation:      http://github.com/Zapotek/arachni/wiki
Code Documentation: http://zapotek.github.com/arachni/
Author:    Tasos "Zapotek" Laskos
Copyright: 2010
License:   GNU General Public License v2

Brief description:
-------------------
Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.

Arachni is smart, it trains itself by learning from the HTTP responses it receives during the audit process. Unlike other scanners, Arachni takes into account the dynamic nature of web applications and can detect changes caused while travelling
through the paths of a web application's cyclomatic complexity.

This way attack/input vectors that would otherwise be undetectable by non-humans are seamlessly handled by Arachni.

Finally, Arachni yields great performance due to its asynchronous HTTP model (courtesy of Typhoeus). Thus, you'll only be limited by the responsiveness of the server under audit and your available bandwidth.

Note:
Despite the fact that Arachni is mostly targeted towards web application security, it can easily be used for general purpose scraping, data-mining, etc with the addition of custom modules.
-------------------
[More: http://zapotek.github.com/arachni/]


Regards,
Tasos L.




This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------


Current thread: