search

Arachni / arachni

Web Application Security Scanner Framework
http://www.arachni-scanner.com
Other
3.76k stars 761 forks source link

Infinite Loop Causes Arachni Scan to Run Indefinitely #998

Open rkhal101 opened 6 years ago

rkhal101 commented 6 years ago

I'm running a default scan using v1.5.1 on the WackoPicko intentionally vulnerable web application. One of the crawling challenges is a calendar that displays the agenda for the given day and links to the page for the following day. If the link to the following day is always pressed by the crawler, this causes an infinite loop. This seems to occur in the Arachni scanner.

I attached two scripts:

  1. The first one runs a default scan on the WackoPicko application. This ran for over 12 hours. After I manually stopped the scan, I noticed the infinite loop issue in the links presented in the site map (file attached).
  2. The second script runs a default scan with the calendar page out of context. This ran for less than a half an hour and terminated without any intervention. files.zip