{"id":1389,"date":"2009-01-20T02:16:39","date_gmt":"2009-01-20T02:16:39","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=1389"},"modified":"2015-09-09T19:39:05","modified_gmt":"2015-09-09T11:39:05","slug":"acunetix-web-vulnerability-scanner-6-review","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2009\/01\/acunetix-web-vulnerability-scanner-6-review\/","title":{"rendered":"Acunetix Web Vulnerability Scanner 6 Review"},"content":{"rendered":"

[ad]<\/p>\n

As you might know if you’ve been reading for some time, I do occasionally review commercial software if it’s interesting and relevant – the last one I remember doing was back in 2007 “Outpost Security Suite PRO Review<\/a>“.<\/p>\n

This time it’s for a much more relevant piece of software IMHO, and one which I actually like using and have used in the past – Acunetix Web Vulnerability Scanner 6<\/a>. Version 6 was recently released and has some quite exciting new features including the new more accurate Acusensor<\/a>, Port Scanner and Network Alerts tool and actual Blind SQL Injection<\/a>.<\/p>\n

\"Acunetix\"<\/a><\/p>\n

If you were previously using version 5 and you’re interesting in version 6 there are some good progressive changes. One good development is AcuSensor which goes much more in depth into web application security testing and code injection (it can find vulnerabilities that typical black box scanning wouldn’t). The new Port Scanning feature will perform some kind of Nessus<\/a> like function and try and find vulnerabilities in network services, you can learn more about adding your own vulnerability scripts here<\/a>.<\/p>\n

Something important for me too is the additional of Pausing a scan, this is very useful especially on a long scan when you can only carry it out during off peak hours.<\/p>\n

There are some other minor improvements like the ability to mark an alert as a false positive, improvements in the scheduler and general improvements in the searching and filtering features.<\/p>\n

Installation<\/strong><\/p>\n

Installation is very easy, there are very few options to select and it’s just a next-next kind of install. There is the option of installing the BETA Firefox Plugin, which is pretty neat. No reboot is required during install, but you do need to Restart Firefox if you wish to utilize the Plugin.<\/p>\n

\"Installation<\/p>\n

Getting Started<\/strong><\/p>\n

Once you fire up the software it will let you know if there are any updates, it’s managed very well with no manual action needed by the user.<\/p>\n

\"Acunetix<\/p>\n

With the wizard it’s very easy to start a scan or any of the other tasks within WVS.<\/p>\n

\"Acunetix<\/p>\n

Once the target is selected it allows you to optimize the scan for various different technologies depending on the architecture of the site (PHP, ASP, Perl and so on).<\/p>\n

\"Acunetix<\/p>\n

Then the scanning options – it gives you 3 main options for scanning; Extensive, Heuristic and Quick.<\/p>\n