Acunetix Web Vulnerability Scanner
Contents
i
Contents
1.
INTRODUCTION TO ACUNETIX WEB VULNERABILITY SCANNER _____________________________________5
1.1
WHY YOU NEED TO SECURE YOUR WEB APPLICATIONS ________________________________________________5
1.2
WEB ATTACK EXAMPLES _______________________________________________________________________6
1.3
THE ACUNETIX WEB VULNERABILITY SCANNER _______________________________________________________7
1.4
AUDITED VULNERABILITIES ______________________________________________________________________7
1.5
SUPPORTED TECHNOLOGIES _____________________________________________________________________9
1.6
MAIN FEATURES _____________________________________________________________________________9
1.7
ACUNETIX WVS PROGRAM OVERVIEW
__________________________________________________________
13
1.8
LICENSE SCHEME ___________________________________________________________________________
19
1.8.1
Perpetual or Time Based Licenses
_____________________________________________________
19
1.8.2
Small Business Version 1 Site/Server ___________________________________________________
19
1.8.3
Enterprise Version Unlimited Sites/Servers
_____________________________________________
19
1.8.4
Consultant Version __________________________________________________________________
19
1.8.5
Purchasing Acunetix WVS ____________________________________________________________
20
2.
INSTALLING ACUNETIX WVS
__________________________________________________________________
21
2.1
SYSTEM REQUIREMENTS
_____________________________________________________________________
21
2.2
INSTALLATION PROCEDURE____________________________________________________________________
21
2.3
UPGRADE PROCEDURE _______________________________________________________________________
23
2.4
CONFIGURING A PROXY SERVER ________________________________________________________________
25
2.5
CONFIGURING WEB BROWSER FOR HTTP SNIFFER __________________________________________________
26
2.6
PASSWORD PROTECT WVS ___________________________________________________________________
27
2.7
LIMITATIONS OF THE EVALUATION VERSION _______________________________________________________
29
2.8
UPGRADING FROM AN EVALUATION TO A PURCHASED VERSION ________________________________________
29
2.9
EXTENDING OR UPGRADING A PURCHASED VERSION _________________________________________________
29
3.
THE USER INTERFACE_________________________________________________________________________
31
3.1
INTRODUCTION ____________________________________________________________________________
31
3.2
THE WVS MAIN INTERFACE___________________________________________________________________
31
3.2.1
Layout _____________________________________________________________________________
31
3.2.2
Navigation
_________________________________________________________________________
31
3.2.3
Toolbar ____________________________________________________________________________
32
3.2.4
Tools Explorer_______________________________________________________________________
33
3.2.5
Main Area __________________________________________________________________________
34
3.2.6
Activity Window_____________________________________________________________________
34
3.2.7
Status Bar __________________________________________________________________________
35
3.2.8
Hiding Panels _______________________________________________________________________
35
3.2.9
Context Menus ______________________________________________________________________
35
3.3
THE SETTINGS INTERFACE_____________________________________________________________________
36
3.3.1
Saving Changes _____________________________________________________________________
37
3.4
ERROR HANDLING __________________________________________________________________________
37
4.
GETTING STARTED: SCANNING YOUR WEBSITE
_________________________________________________
38
4.1
STARTING A SCAN __________________________________________________________________________
38
4.2
STEP 1: SELECT TARGET(S) TO SCAN _____________________________________________________________
39
4.3
STEP 2: CONFIRM TARGETS AND TECHNOLOGIES DETECTED
___________________________________________
40
4.4
STEP 3: SPECIFY CRAWLER OPTIONS_____________________________________________________________
41
4.5
STEP 4: SPECIFY SCANNING PROFILE OPTIONS AND MODE ____________________________________________
42
4.6
STEP 5: CONFIGURE LOGIN FOR PASSWORD PROTECTED AREAS
________________________________________
43
4.7
STEP 6: CONFIGURING CUSTOM 404 ERROR PAGES _________________________________________________
47
4.8
SELECTING THE FILES/FOLDERS TO SCAN__________________________________________________________
49
 |
 |
 |