The most complete tutorial in the history of vulnerability scanner AWVS

1 Overview

AWVS stands for "Acunetix Web Vulnerability Scanner" and is a well-known web application security scanner. It is used to detect and assess security holes and weaknesses in web applications. AWVS can automatically scan and identify common network vulnerabilities, and provide detailed reports to help website administrators and developers discover and fix security issues

working principle:

• Scan the entire network by tracking all links on the site and robots.txtscan. After scanning, AWVS will map out the structure of the site and display the detailed information of each file
• After the above-mentioned discovery phase or scanning process, AWVS will automatically launch a series of vulnerability attacks on each page found, which is essentially a simulation of a hacker's attack process (using a custom script to detect whether there is a vulnerability) ). AWVS analyzes where data needs to be entered on each page, and then tries all input combinations. This is an automatic scanning phase
• After it finds vulnerabilities, AWVS will report these vulnerabilities in the "Alerts Node (Warning Node)", each warning contains vulnerability information and suggestions on how to fix the vulnerability
• After a scan is complete, it saves the results to a file for later analysis and correlation with previous scans.