How to use Arachni Framework

http://arachni.segfault.gr/latest The first thing you will need is CYGWIN, get it here. After it is installed download arachni and use the self extarcting archive and extract it to a folder of your choice. When it's done extracting, open the Cygwin.bat file. Now, we can create a simple RUBY file to include the arachni framework and start auditing a webpage. Type notepad text.rb and notepad will ask if you want to create the file, click yes. In here is where we will use the arachni framework.

Include the header for the CLI output and arachni itself

1:  require 'arachni/ui/cli/output'  
2:  require 'arachni'  

Turn off verbose

1:  Arachni::UI::Output.mute!  

Get some options from the framework

1:  opts = Arachni::Options.instance  

Specify that we want to audit html forms

1:  opts.audit_forms = true  

Now specif the URL (seed)

1:  opts.url = 'http://testfire.net/'  

if we only want to scan a single URL we would add this line

1:  opts.restrict_paths << 'http://testfire.net/search.aspx'  

New class (new arachni object with our options)

1:  framework = Arachni::Framework.new(opts)  

if we want to look for XSS exploits we would use

1:  framework.modules.load(['xss'])  

You can load ALL the modules by using a asterisk

1:  framework.modules.load(['*'])  

now run arachni

1:  framework.run  

get the first exploit we see

1:  issue = framework.audit_store.issues.first  

show the exploit we found on screen (cli output)

1:  puts "#{issue.name} at #{issue.url} in #{issue.elem} input `#{issue.var}` using #{issue.method}."  

And here is a code to scan for all the modules against a specific page.

1:  require 'arachni/ui/cli/output'  
2:  require 'arachni'  
3:  Arachni::UI::Output.mute!  
4:  opts = Arachni::Options.instance  
5:  opts.audit_forms = true  
6:  opts.url = 'http://www.bigcinemas.com/'  
7:  opts.restrict_paths << 'http://www.bigcinemas.com/in/sendSMS.asp?mobNum=9762001337'  
8:  framework = Arachni::Framework.new( opts )  
9:  framework.modules.load(['*'])  
10:  framework.run  
11:  issue_arr = framework.audit_store.issues  
12:  issue_arr.each do|issue|  
13:    puts "#{issue.name} at #{issue.url} in #{issue.elem} input `#{issue.var}` using #{issue.method}.\n"  
14:  end  

Wireshark 1.4.6

Ever since Wireshark come on the scene it was adopted as the #1 LAN sniffer for security demonstrations, says me. You don't have to believe all the hype and can go back to your console screen logging hours at the page down key. Wireshark for Windows is the best choice for capturing LAN traffic. Download Wireshark Here.

Wireshark is extremely easy to use and even a novice can start capturing data on the network. Wireshark features a very rich system to let you edit and resend packets over the network. You can set it to stop capturing after 'x' amount of packets which can be VERY handy for testing application bugs. You can control the size of capture log files and even use multiple files to log your captures too.