using exec module with arachni_web. Possible ?

Arachni / arachni

Web Application Security Scanner Framework

http://www.arachni-scanner.com

Other

3.71k stars 756 forks source link

using exec module with arachni_web. Possible ? #1064

Closed Chridolc closed 2 years ago

Chridolc commented 2 years ago

Hello. Not really a issue but a question : it would be interesting for me to add extra tests with third party tools like wpscan / nikto and some other stuffon the server before or after a scheduled scan. Find the exec module that may do what i need bu it seems not to work with arachni_web (Cannot be executed while running as an RPC server error). Is there a way to make it works ?

Thanks.

Zapotek commented 2 years ago

It's intentionally set this way so that it won't result in a remote-code execution issue. If you want to automate this sort of thing then it's best to do it outside of Arachni.