Get the latest version!
Want to skip all the reading and get to the scanning, then go to the download page.
Arachni is an Open Source, feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.
It is smart, it trains itself by learning from the HTTP responses it receives during the audit process and is able to perform meta-analysis using a number of factors in order to correctly assess the trustworthiness of results and intelligently identify false-positives.
It is versatile enough to cover a great deal of use cases, ranging from a simple command line scanner utility, to a global high performance grid of scanners, to a Ruby library allowing for scripted audits, to a multi-user multi-scan web collaboration platform.
Want to skip all the reading and get to the scanning, then go to the download page.
Arachni's HTTP stack has the time-proven cURL library at its core and utilizes asynchronous requests in order to squeeze out every little bit from your available resources.In addition, the High Performance Grid allows you to combine the resources of multiple nodes for lightning fast scans.
More
In order to compensate for the widely heterogeneous environment of the WWW Arachni utilizes a combination of widely deployed techniques (taint-analysis, fuzzing, differential analysis, timing/delay attacks) along with novel technologies (rDiff analysis, modular meta-analysis) developed specifically for the framework.
More
Arachni is a fully automated system which tries to enforce the fire and forget principle. As soon as a scan is started it will not bother you for anything nor require further user interaction.Upon completion, you will be able to export the scan results to several different formats (HTML, Plain Text, XML, etc.).
More
The system allows for multiple deployment options ranging from a Ruby library for highly customized scripted scans, to a simple single-user single-scan command line interface, to a multi-user multiple/parallel-scan distributed deployment, to a global High Performance Grid deployment for lightning fast scans.
MoreHi folks, There was an issue with the YAML parser for v0.4.2 which rendered the information provided by the CHANGELOG and the announcement blog post inaccurate. When v0.4.2 was released, it was mentioned that the YAML parser engine had been
After each release I like to let users know where things are headed so this is one of those posts. Before v0.4.2 my 2 big goals were a new web interface (for v0.4.2) and support for JS/DOM/AJAX (for v0.5). Now
EDIT: Removed notice about YAML engine being changed to Psych, see this post for details. Hey folks, the time has come to release the 0.4.2 version of Arachni with plenty of features, improvements and fixes to go around. In addition
Use the command line utilities to perform quick and dirty scans.
Use the web interface to collaborate with your team and manage your scans and their findings.
Use Arachni’s distributed architecture to provide services to your users and clients.