Location>code7788 >text

AWVS (Acunetix)

Popularity:43 ℃/2025-04-27 16:37:23

Network Security Penetration Test-AWVS (Acunetix) Vulnerability Scan Tool Installation and Use Tutorial

AWS Installation and Activation

Introduction to AWS

AWVS (Acunetix Vulnerability Scanner) is a network vulnerability scanning tool that tests website security through network crawlers and detects popular web application attacks, such as cross-site scripting, SQL injection, etc. According to statistics, 75% of Internet attacks target web-based applications.

Why use AWS

Hackers are emerging in an endless stream, such as sql injection, xss, file inclusion, directory traversal, parameter tampering, authentication attacks, etc. Although the correct firewall and WAF are configured, these security defense software still have strategic bypasses, so it is necessary to scan your web applications regularly. Manual detection is too cumbersome, and AWVS can automatically scan and detect.

Docker image installation

Reference article:/HxiongGe/article/details/134361076?fromshare=blogdetail&sharetype=blogdetail&sharerId=134361076&sharerefer=PC&sharesource=2301_76820728&sharefrom=from_link

SCDN docker installation AWVS 23.9.231005181 Orchestrator_me

/weixin_43819747/article/details/135163728?fromshare=blogdetail&sharetype=blogdetail&sharerId=135163728&sharerefer=PC&sharesource=2301_76820728&sharefrom=from_link

SCDN 【awvs】docker installs awvs vulnerability scanning tool, jingshensong and hot water

Search for images on docker hub:Docker Hub Container Image Library | App Containerization

Pull the mirror:docker pull secfa/awvs

Create a container:docker run -itd -p 13443:3443 --name acunetix_web --cap-add CAP_LINUX_IMMUTABLE secfa/awvs:latest

  • Port mapping: Map the 3443 port of docker to the 13443 port of the physical machine
  • Container name: acunetix_web
  • Add Linux capabilities:CAP_LINUX_IMMUTABLEIt is a type of Linux capabilities that allows processes to modify filesIMMUTABLEandAPPENDAttribute flag. Processes with this capability can bypass regular permission checks and directly set or clear the immutable properties of the file.
[root@node1 ~]# docker pull secfa/awvs

[root@node1 ~]# docker images
REPOSITORY   TAG       IMAGE ID       CREATED        SIZE
secfa/awvs   latest    eab4d39017c2   6 months ago   1.5GB

[root@node1 ~]# docker run -itd -p 13443:3443 --name acunetix_web --cap-add CAP_LINUX_IMMUTABLE secfa/awvs:latest
5c047fe2b68d4483aa8a689ac384186e3dc987546f7fe2cf47d5fb44c76d6451

[root@node1 ~]# docker ps -a
CONTAINER ID   IMAGE               COMMAND                  CREATED          STATUS         PORTS                                         NAMES
5c047fe2b68d   secfa/awvs:latest   "/bin/sh /awvs_start…"   18 seconds ago   Up 4 seconds   0.0.0.0:13443->3443/tcp, :::13443->3443/tcp   acunetix_web

Visit the built awvs:https://192.168.9.208:13443

Default username:admin@
Default password:Admin123

Use of AWS

Reference article:/BlogVice-2203/p/