diff --git a/examples/server.rb b/examples/server.rb index 529bba3..6bba740 100644 --- a/examples/server.rb +++ b/examples/server.rb @@ -137,14 +137,16 @@ def show( str ) url = env['rack.url_scheme'] + '://' + env['HTTP_HOST'] show <Feed the vectors to Arachni -
arachni #{url} --plugin=vector_feed:yaml_file='#{cwd + VECTORS_FILE}' -m xss --link-count=0
+
arachni #{url} --plugin=vector_feed:yaml_file='#{cwd + VECTORS_FILE}' -m xss --link-count=0 --http-req-limit=1

Why?

  1. We only use the XSS module because this is a demo.
  2. We set the link-count limit to 0 to prevent Arachni - from crawling and only audit the stuff passed to it by the VectorFeed plug-in.
  3. + from crawling and only audit the stuff passed to it by the VectorFeed plug-in. +
  4. We set the http-req-limit to 1 to throttle Arachni down since you'll + probably been scanning localost.

EOHTML