Network Security Penetration Test-AWVS (Acunetix) Vulnerability Scan Tool Installation and Use Tutorial
AWS Installation and Activation
Introduction to AWS
AWVS (Acunetix Vulnerability Scanner) is a network vulnerability scanning tool that tests website security through network crawlers and detects popular web application attacks, such as cross-site scripting, SQL injection, etc. According to statistics, 75% of Internet attacks target web-based applications.
Why use AWS
Hackers are emerging in an endless stream, such as sql injection, xss, file inclusion, directory traversal, parameter tampering, authentication attacks, etc. Although the correct firewall and WAF are configured, these security defense software still have strategic bypasses, so it is necessary to scan your web applications regularly. Manual detection is too cumbersome, and AWVS can automatically scan and detect.
Docker image installation
Reference article:/HxiongGe/article/details/134361076?fromshare=blogdetail&sharetype=blogdetail&sharerId=134361076&sharerefer=PC&sharesource=2301_76820728&sharefrom=from_link
SCDN docker installation AWVS 23.9.231005181 Orchestrator_me
/weixin_43819747/article/details/135163728?fromshare=blogdetail&sharetype=blogdetail&sharerId=135163728&sharerefer=PC&sharesource=2301_76820728&sharefrom=from_link
SCDN 【awvs】docker installs awvs vulnerability scanning tool, jingshensong and hot water
Search for images on docker hub:Docker Hub Container Image Library | App Containerization
Pull the mirror:docker pull secfa/awvs
Create a container:docker run -itd -p 13443:3443 --name acunetix_web --cap-add CAP_LINUX_IMMUTABLE secfa/awvs:latest
- Port mapping: Map the 3443 port of docker to the 13443 port of the physical machine
- Container name: acunetix_web
- Add Linux capabilities:
CAP_LINUX_IMMUTABLE
It is a type of Linux capabilities that allows processes to modify filesIMMUTABLE
andAPPEND
Attribute flag. Processes with this capability can bypass regular permission checks and directly set or clear the immutable properties of the file.
[root@node1 ~]# docker pull secfa/awvs
[root@node1 ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
secfa/awvs latest eab4d39017c2 6 months ago 1.5GB
[root@node1 ~]# docker run -itd -p 13443:3443 --name acunetix_web --cap-add CAP_LINUX_IMMUTABLE secfa/awvs:latest
5c047fe2b68d4483aa8a689ac384186e3dc987546f7fe2cf47d5fb44c76d6451
[root@node1 ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
5c047fe2b68d secfa/awvs:latest "/bin/sh /awvs_start…" 18 seconds ago Up 4 seconds 0.0.0.0:13443->3443/tcp, :::13443->3443/tcp acunetix_web
Visit the built awvs:https://192.168.9.208:13443
Default username:admin@
Default password:Admin123
Use of AWS
Reference article:/BlogVice-2203/p/