Arachni / arachni

Web Application Security Scanner Framework
http://www.arachni-scanner.com
Other
3.76k stars 761 forks source link

Missing Scan address # #1008

Open bbday opened 6 years ago

bbday commented 6 years ago

I use: arachni --output-only-positive http://testhtml5.vulnweb.com/ and i compared with http://www.arachni-scanner.com/reports/report.html/#!/sitemap

I see it miss some detections and in "sitemap" tab of my scan miss all address with #: http://testhtml5.vulnweb.com/#/about http://testhtml5.vulnweb.com/#/archive ... Then my sitemap is 12 elements vs 195 of old report (9 issues detected vs 16 old report)

I don't have idea why arachni don't scan address with #, but without check them it missing many flags.