drupanchal / skipfish

A web application security reconnaissance tool
Apache License 2.0
0 stars 0 forks source link

Running Skipfish on WIVET Session Issue #214

Open rkhal101 opened 6 years ago

rkhal101 commented 6 years ago

Hi,

I'm running Skipfish version 2.10b on the WIVET application and I can't seem to maintain the scan across one session. The following is the command I run:

skipfish -o /root/Desktop/skipfishoutput -C PHPSESSID=0e8961ccd026556af840bbd9dda07687 -N -X /logout.php -X /offscanpages/ http://127.0.0.1:8080/

As listed in the man page, I use -X to exclude the logout page and -C and -N to make sure that the session cookie doesn't change. Any help would be greatly appreciated!

I was also wondering if the pivots.txt file generated by skipfish contains all the URLs visited?

I attached the WIVET output to view the number of different sessions skipfish opened in one scan.

Thanks! skipfish-wivet.zip