Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Issues
  • #650
Closed
Open
Issue created Dec 14, 2015 by Administrator@rootContributor

Scanner seems to get stuck on certain check

Created by: sbehrens

Hi Tasos,

I'm not sure exactly which plugin but lately spits out these messages indefinitely (after crawling the site for maybe 5-10 minutes). These messages continue to be printed until my scan times out (I have it set to timeout after 8 hours). The scanner finds no issues (unlike a few weeks ago where it was picking up CSRF as an example)

 [*] [HTTP: 200] http://www.netflix.com/browse
 [~] Identified as: unix, linux, mysql, pgsql, apache, jetty, nginx, tomcat, java
 [~] Analysis resulted in 0 usable paths. 
[*] Harvesting HTTP responses...
 [~] DOM depth: 1 (Limit: 3)
 [~]   Transitions:
 [~]     -- [1.1881s] load     => page (http://www.netflix.com/browse)
 [~] DOM depth: 1 (Limit: 3)
 [~]   Transitions:
 [~]     -- [1.1881s] load     => page (http://www.netflix.com/browse)
 [~] DOM depth: 1 (Limit: 3)
 [~]   Transitions:
 [~]     -- [1.1881s] load     => page (http://www.netflix.com/browse)
 [~]         * [0.7548s] request  => http://www.netflix.com/browse
 [~] Check code_injection does not support: unix + linux + mysql + pgsql + apache + jetty + nginx + tomcat + java
 [~] Check no_sql_injection does not support: unix + linux + mysql + pgsql + apache + jetty + nginx + tomcat + java
 [~] Check no_sql_injection_differential does not support: unix + linux + mysql + pgsql + apache + jetty + nginx + tomcat + java

Any idea on what this check is and why it's not able to continue scanning/crawling?

Assignee
Assign to
Time tracking