[轉] 開源的弱掃工具 - Archery

原文：Archery - Open Source Vulnerability Assessment And Management Helps Developers And Pentesters To Perform Scans And Manage Vulnerabilities


---------------------------------------------------------
Requirement

• Python 2.7
• OpenVas 8
• OWASP ZAP 2.7.0 (https://github.com/zaproxy/zaproxy/wiki/Downloads)
• Selenium Python (Firefox Webdriver) (https://github.com/mozilla/geckodriver/releases)

Installation

$ git clone https://github.com/anandtiwarics/archerysec.git
$ cd /archerysecurity
$ pip install -r requirements.txt
$ python manage.py collectstatic
$ python manage.py makemigrations networkscanners
$ python manage.py makemigrations webscanners
$ python manage.py makemigrations projects
$ python manage.py migrate
$ python manage.py createsuperuser
$ python manage.py runserver

Note: Make sure these steps (except createsuperuser) should be perform after every git pull.

Setup Setting
Zap Setting

1. Go to Setting Page
2. Edit ZAP setting or navigate URL : http://host:port/setting_edit/
3. Fill all required information and click on save.