1. Zach Garcia Keith Reiter
Acunetix Web Vulnerability Scanner

2. Purpose of the Tool
To make sure your site is safe, the tool looks for:
Cross Site Scripting
Open Ports
Blind SQL injection
HTTP Header manipulation
Weak Passwords
Revealing Errors
And a lot more

3. Environment
Acunetix doesn’t require a very special environment. It just needs a couple things:
Acunetix runs only in Windows environments
Must be connected to the internet

4. Explanation of How It Works
It runs a series of scripts which test for various known vulnerabilities. The XSS script tests input boxes and URLs for various XSS vulns, and then the next script starts.
Additionally, a web crawl is performed
And a mild port scan is initiated

5. Explanation of Output Web Alert information
The severity of discovered threats are based on a color code:
Green for informational things like broken links
Blue for low level threats
Yellow for medium threats
Red for very serious, potentially damaging threats

6. Explanation of Output Port Scan information Site Structure
List open ports
This can be useful simply for footprinting
Site Structure
Gives a hierarchical visual of the structure.
This can also be useful for footprinting

7. Review
Ease of use: Extremely easy, but can be used in more advanced ways by more advanced users.
Installation was both easy and fast
Documentation was pretty clear
There were basically no challenges except installing the tool in the CyberSecurity Lab…