Glad you found a solution on your query.

Thank You

Regarding your issue, please contact the support at support@acunetix.com .

Thank You

How can i solve it .... thx in advance
BestRegards.....

Any idea why the scan of a local target will crash the Acunetix application, but scans of public facing targets will not?

-------------

Faulting application name: wvs.exe, version: 6.0.0.3453, time stamp: 0x2a425e19
Faulting module name: pcre.dll, version: 6.7.0.0, time stamp: 0x456b61d0
Exception code: 0xc0000005
Fault offset: 0x00009922
Faulting process id: 0x1370
Faulting application start time: 0x01cd1c10aaefc40f
Faulting application path: C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\wvs.exe
Faulting module path: C:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\pcre.dll
Report Id: abb9ec5d-8806-11e1-abae-90fba6497a77

Do you run any sort of packet capture during your scans to monitor your scanning activity?

Are you able to reproduce the vulnerabilities that are being reported?

https://www.owasp.org/index.php/Testing_for_SSL-TLS_(OWASP-CM-001)

My web application has a login form. The question is: Do I need create a login sequence do check if the SSL 2.0 is enable?

Thank you,
Rodrigo

You cannot install Acunetix in more than one machine using the same license.

Thank You

I can confirm that two responses have been send regarding your first query.

You will be receiving a response for your current query shortly.

Thank You

thank you for getting back to me. I have indeed never received these emails; they aren't even in the spam folder. Could you please ask to send those again, or at least tell me what the answer was?

I have indeed received a reply to my second email, asking me to provide http logs. I have done so yesterday and am currently waiting for a reply.

Kind regards,
Geert

Regarding your first email, the support has replied to your query with two email responses on the same date you have contacted us. They have never heard back from you. Please check your Spam or Junk mail boxes for the specific support emails since sometimes are saved in there.

Regarding the second email, the support team has already contacted you as soon as they received your query.

Thank You

Stay tuned with the latest news and updates by subscribing to our Acunetix Blog website http://www.acunetix.com/blog/ , Facebook account http://www.facebook.com/Acunetix or follow us on Twitter http://twitter.com/Acunetix .

I have already emailed support@acunetix.com with my question last week, and an update earlier today. However I received no reply, so I thought I'd give it a try here as well.

First email:

In the nearby future we are planning to perform a scan on the Dutch website http://www.bol.com. They have informed us that their Intrusion Detection Systems will disconnect and block any IP address that generates over 300 HTTP Requests per minute. Unfortunately I have not seen an option in Acunetix WVS 8 that allows me to limit this number. I have however found a way to set a delay between consecutive requests. This would mean that we have to set a high enough delay to prevent the IDS from shutting us out, but if we do so I am afraid the scan may take quite a bit longer than we have anticipated. Is there another way for us to prevent triggering the IDS during this scan?

Second email:

We have started the scan today and, despite largely scaling down the traffic, immediately were blocked by the IDS of our customer. They have informed us the scanner generated well over one-hundred requests per second. I fail to see how this is possible, since I have adjusted the HTTP options to a maximum of 5 parallel connections, a HTTP timeout of 60 seconds and a 2000 ms delay between consecutive HTTP requests. This leads me to believe there will be at most 5 requests per 2 seconds, which is at most 150 requests per minute. How is this possible? Please get back to us as soon as possible on this issue, as we have a limited window to scan the website.

Could you please take a look at our issue and help us figure out what is causing the inconsistencies?

Kind regards,
Geert Smelt

Please check if you have any proxy configuration settings or any other software that might interrupt the network connection between the Acunetix Web Vulnerability Scanner and the target website.

Thank You

Getting
"[Warning] Request from login sequence returned invalid status (Internal Server Error)
[Error] Unable to start server, socket error nr 10013: An attempt was made to access a socket in a way forbidden by its access permissions." in error log during select a login sequence in new scan wizard finished.

Help me to resolve.

Thanks in advance
Sendhil

While trying to scan a web application with recorded new login sequence.I am getting the "[Error] Unable to start server, socket error nr 10013: An attempt was made to access a socket in a way forbidden by its access permissions." in the error log.

How can i resolve this issue?

Thanks
Sendhil

Thank you for showing interest in our product.

Since this type of problem cannot be solved via this forum, please send us an email with all the logs and license key details to support@acunetix.com. The support department will be willing to assist you.

Looking forward to hearing from you.

If the website was down for everyone than it confirms that the hosting provider blocked access to it thinking it might block the attack.

Why would i be getting the following logged errors on scans when it comes to the scripts?

03.14 13:07.47, [Warning] Error while executing Code_Execution.script: List index out of bounds (0). In "classCodeExecution.inc". Line 118, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing CRLF_Injection.script: List index out of bounds (0). In "classCRLFInjection.inc". Line 111, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Directory_Traversal.script: List index out of bounds (0). In "classDirectoryTraversal.inc". Line 138, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Error_Message.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\Error_Message.script". Line 57, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Expression_Language_Injection.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\Expression_Language_Injection.script". Line 25, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing File_Inclusion.script: List index out of bounds (0). In "classFileInclusion.inc". Line 141, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing LDAP_Injection.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\LDAP_Injection.script". Line 74, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing MongoDB_Injection.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\MongoDB_Injection.script". Line 54, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing PHP_Code_Injection.script: List index out of bounds (0). In "classPHPCodeInjection.inc". Line 146, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Remote_File_Inclusion_XSS.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\Remote_File_Inclusion_XSS.script". Line 43, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Script_Source_Code_Disclosure.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\Script_Source_Code_Disclosure.script". Line 86, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Sql_Injection.script: List index out of bounds (0). In "classSQLInjection.inc". Line 244, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing Unsafe_preg_replace.script: List index out of bounds (0). In "classUnsafePregReplace.inc". Line 79, Column 3. Source: " this.scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing XML_External_Entity_Injection.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\XML_External_Entity_Injection.script". Line 60, Column 3. Source: " scheme.populateRequest(this.lastJob);".

03.14 13:07.47, [Warning] Error while executing XPath_Injection.script: List index out of bounds (0). In "C:\ProgramData\Acunetix WVS 8\Data\Scripts\PerScheme\XPath_Injection.script". Line 73, Column 3. Source: " scheme.populateRequest(this.lastJob);".

thank you.

Since this is a feature request, I would recommend you to post your request on our feature request portal; http://ideas.acunetix.com

Most probably the hosting provider took the website down since they thought it might be under attack. We just wrote a blog post about this, i.e. ideally you should always advise the hosting provider before running a scan (especially if you are using a shared hosting solution).

http://www.acunetix.com/blog/docs/faq-avoid-website-blocked-scanning-acunetix-wvs/

Welcome to the Acunetix Web Vulnerability Scanner forums.

Since Acunetix Web Vulnerability Scanner is a black box scanner, scans against web applications are preferred to be performed on test or simulated environments. It is not recommended to perform such scans against live web applications.

For more information on this subject please refer to the following link.

Link: http://www.acunetix.com/blog/docs/invasive-vs-non-invasive-web-application-security-scan/

Thank You

Stay tuned with the latest news and updates by subscribing to our Acunetix Blog website http://www.acunetix.com/blog/ , Facebook account http://www.facebook.com/Acunetix or follow us on Twitter http://twitter.com/Acunetix .

Cheers!

Now it's deleted my entire mysql database. Is there even a way to recover what acunetix decided to just delete?

But can Acunetix reports show the Common Vulnerabilities and Exposures (CVE) Numbers and the corresponding CVSS scores for each vulnerability identified by Acunetix?

What version of the Acunetix Web Vulnerability Scanner are you using ?

Thank You