Hello good people,
I thought I’d give you an update regarding Arachni’s development.
Lately I’ve been working towards adding modules to the system and most importantly I’ve split the modules into 2 categories: Recon and Audit.
As of today the following modules are available:
Recon
- backup_files.rb
- common_directories.rb
- common_files.rb
Audit
- blind_sqli.rb
- eval.rb
- path_traversal.rb
- response_splitting.rb
- simple_cmd_exec.rb
- simple_rfi.rb
- sqli.rb
- xss_path.rb
- xss.rb
- xss_uri.rb
I guess that many of them need further optimization and bugfixing but there’s plenty of time for that.
The important thing is that the basic modules are there.
Sure the list may seem short compared to other systems but I don’t see the need to duplicate functionality.
For example, many scanners have separate modules/plug-ins for path traversal and local file inclusion when in essence it’s the same thing.
So I trust the users to be smart and see through that.
Of course test cases, feature and module requests are very welcomed and I will do my best to accommodate them.
With that said, the system looks stable both functionality and design wise so I think it’s time I up it to Beta.
So I’ll, once again, test the hell out of it, fix whatever needs fixing and give it to the world to beta test.
Then I’ll start writing some decent documentation for module/report development and user guides.
After all Arachni’s biggest strength is its extendability, so documentation is essential to make people see how easy it is to develop their own modules and generally contribute.
That’s all for now, time to watch the Greece vs Turkey basketball game.





