You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Oct 14, 2020. It is now read-only.
Copy file name to clipboardExpand all lines: docs/user-guide/usage-examples/arachni-juice-shop-example.md
+12-12Lines changed: 12 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,22 +1,22 @@
1
-
# Scanning modern Single Page Application like OWASP JuiceShop using arachni
1
+
# Scanning modern Single Page Application like OWASP JuiceShop using Arachni
2
2
3
-
Scanning for Vulnerabilities in OWASP JuiceShop using arachni and the secureCodeBox API.
3
+
Scanning for Vulnerabilities in OWASP JuiceShop using Arachni and the secureCodeBox.
4
4
5
5
## Introduction
6
6
7
7
JuiceShop poses some problems for many scanners, as it is written as a single page application. This means that the scanner needs to be able to execute JavaScript to spider the application.
8
8
9
-
Luckily arachni is intended for exactly this case!
9
+
Luckily Arachni is intended for exactly this case!
10
10
11
11
## Testing the setup
12
12
13
-
To start of we should test weather the secureCodeBox and JuiceShop is properly set up. To do this we can start a minimal scan which will finish relatively quickly. This is done by setting the Page Limit to `1` so that arachni will only test the first page of the application.
13
+
To start of we should test weather the secureCodeBox and JuiceShop is properly set up. To do this we can start a minimal scan which will finish relatively quickly. This is done by setting the Page Limit to `1` so that Arachni will only test the first page of the application.
@@ -42,20 +42,20 @@ This scan should finish in about a minute and should return a couple of findings
42
42
43
43
## Full JuiceShop Arachni Config
44
44
45
-
A full arachni scan config for JuiceShop includes optimisations to maximise the amount of vulnerabilities discovered and optimise the scan time.
45
+
A full Arachni scan config for JuiceShop includes optimisations to maximise the amount of vulnerabilities discovered and optimise the scan time.
46
46
47
47
This is done by configuring the following parameters:
48
48
49
49
1. Increase Scan Depth (DOM_DEPTH, DIR_DEPTH and PAGE_LIMIT) to more sensible values for the application.
50
-
2. Exclude non relevant endpoints. This greatly decreases the scan time as arachni doesn't have to waste time scanning non relevant resources like static css/js files or socket.io endpoints.
51
-
3. Extending the spider by routes we know about but arachni wont be able to find via its spider because the are not linked anywhere in the application.
52
-
4. Provide arachni with the ability to log into the application. This is often the hardest part of the scan config. Without it the scanner will not be able access restricted pages, so that the scanner will only scan a subset of the application. In this case the login is performed using the `login-script` plugin of arachni which lets us script how to to the login. This script is included in the default `docker-compose` setup of the secureCodeBox. This script is located in `plugins/arachni-login-scripts/login_juice_shop.rb`. You can add custom login scripts for your application into the same directory, the will get mounted into the arachni container.
50
+
2. Exclude non relevant endpoints. This greatly decreases the scan time as Arachni doesn't have to waste time scanning non relevant resources like static css/js files or socket.io endpoints.
51
+
3. Extending the spider by routes we know about but Arachni wont be able to find via its spider because the are not linked anywhere in the application.
52
+
4. Provide Arachni with the ability to log into the application. This is often the hardest part of the scan config. Without it the scanner will not be able access restricted pages, so that the scanner will only scan a subset of the application. In this case the login is performed using the `login-script` plugin of Arachni which lets us script how to to the login. This script is included in the default `docker-compose` setup of the secureCodeBox. This script is located in `plugins/Arachni-login-scripts/login_juice_shop.rb`. You can add custom login scripts for your application into the same directory, the will get mounted into the Arachni container.
0 commit comments