arachni

Web Application Security Scanner Framework

This repository contains full code examples from the book Gray Hat C#

Docker images for infosec tools

a passive scanner based on Mitmproxy and Arachni

A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity

DevSecOps best practices with a vulnerable Flask based web application

Part of the deprecated secureCodeBox v1, see secureCodeBox/secureCodeBox Repo for v2

A repository with training material for a Secure Supply Chain Course

Command Generator Script for Arachni (Simplify the CLI)

Saves user session cookies in Google Chrome

DevSecOps k8s cluster with GitLab and pipelines with SCA, SAST (Sonarqube), DAST, and IaC security to deploy to Azure

This is a skeleton project for working with Arachni (https://www.arachni-scanner.com/), a web application security scanner framework, in a Docker environment.