secureCodeBox / scanner-webapplication-arachni

Part of the deprecated secureCodeBox v1, see secureCodeBox/secureCodeBox Repo for v2
Apache License 2.0
5 stars 0 forks source link

Parameter not implemented #5

Open J12934 opened 5 years ago

J12934 commented 5 years ago

The target parameter ARACHNI_SCAN_METHODS is currently not being used.

The parameter gets read from the target but its not getting passed along to arachni.

https://github.com/secureCodeBox/scanner-webapplication-arachni/blob/0960aa2595a9ec557db775235c4f001cb9ee1a98/src/arachni_configuration.rb#L39

https://github.com/secureCodeBox/scanner-webapplication-arachni/blob/0960aa2595a9ec557db775235c4f001cb9ee1a98/src/arachni_configuration.rb#L81

The available checks can be found in the arachni documentation: https://github.com/Arachni/arachni#checks

J12934 commented 5 years ago

ARACHNI_SCAN_METHODS is now used inside the wrapper. But the form in the engine hasn't been updated, meaning that the parameter currently can only be set via the api.