Hey folks, I don’t usually blog about bug fixes but I think this is worthy, I better give you an intro first. Arachni’s packages are supposed to be self-contained, that is, they don’t need any dependencies to be installed on the host system. From common system-level libraries like libxml and …Read More
New executable: arachni_multi
Hello people, I’ve got a new feature to showcase for you today, well, more of a convenience than a feature, if I’m honest. Seeing as the project has lately been revolving around processes and Instances and combining them and spreading them around, and multi-Instance scans are the way forward, it’s …Read More
Performance gains with fingerprinting and multi-Instance scans
Hey folks, I have some really impressive benchmarks to present, showing the performance difference between what was possible with v0.4.2 and what’s going to be possible with v0.4.3. For the shown benchmarks, only audit modules were loaded to make the affect of the described changes clearer — since fingerprinting only …Read More
YAML engine of v0.4.2 RPC remained Syck
Hi folks, There was an issue with the YAML parser for v0.4.2 which rendered the information provided by the CHANGELOG and the announcement blog post inaccurate. When v0.4.2 was released, it was mentioned that the YAML parser engine had been switched from Syck to the now Ruby default Psych. Unfortunately, …Read More
What’s next (post v0.4.2)
After each release I like to let users know where things are headed so this is one of those posts. Before v0.4.2 my 2 big goals were a new web interface (for v0.4.2) and support for JS/DOM/AJAX (for v0.5). Now that the first goal has been achieved the focus has …Read More
New release (v0.4.2), new interface, new website
EDIT: Removed notice about YAML engine being changed to Psych, see this post for details. Hey folks, the time has come to release the 0.4.2 version of Arachni with plenty of features, improvements and fixes to go around. In addition to the new release, we also have a brand new …Read More
Sitrep on the new Web Interface (with lots of screenshots)
Hello guys and gals, I’ve been silent for a while because I’ve been working on the new interface (and also been busy with my day job) but it’s time to break this streak of silence and give you some info on how things are going. Initially, I wanted a new …Read More
Release: v0.4.1.3
Hello people, I just released a new bugfix version and here’s the skinny: WebUI Updated Settings page to reflect the selected proxy type. Fixed bug when deleting reports which caused the last report to be removed. HTTP Response bodies only get repacked if the content-type is text-based to avoid corrupting …Read More
Release: v0.4.1.2
Hey folks, A couple of weeks have gone by since v0.4.1.1 was released and now it’s time to send v0.4.1.2 out with some more bugfixes. The ChangeLog is unimpressive but that doesn’t hurt anyone. :) HTTP Updated custom 404 detection algorithm to use less memory. cookie_string option is now decoded …Read More