Now, I want to point out that you're probably looking at my site,
my web page and you're like, wait a second.
I thought we were going to talk about racking
yet. You're talking about code name SC and R. Well, there's a reason for that.
In 2020 Cali stopped providing a rack
in their repository, meaning that
in order to get it, you had to actually go off and download it simultaneously.
Shortly after that,
uh
Arachni
had a name change with a new product launch called codename SC and R.
Now Cys A specifically mentions
Arachni,
but the developers of
Arachni
have changed it over to codename SC and R.
Thus, you're looking at codename SCNR
for the
exam. You need to realize that
Arachni
and code name SC and R are exactly the same.
They do a lot of the same things. They're, they're actually identical. So
you really don't have to worry about it too much.
Just realize that if they update the exam to a newer version,
they may replace the name of rack
A two code name SCNR or SC and R short stands for scanner.
Uh In which case you need to be aware of that.
As far as the usability goes, we're going to show you the newer version,
which is code named SCNR
just because it makes sense since,
has been officially retired
for a little bit of now. So
we're going to show you that. Now. You'll notice that right off the bat.
I have actually got
the command to install
our code name. SCRR, I almost called
it
and it's right there to find it. You're just going to go to
the website. If you type in Arachni,
a matter of fact, I'll show you right. So if I type in Arachni
right there in Google to get off the caps
and then I scroll down to
this website
CS
YPNO, that's the
developer name. And I click on that.
You can see that it provides me to their website and it says, hey, it's been replaced,
just type in that
and then you can try now and it brings us right to this website. So I'm gonna grab that.
We're gonna copy it.
We're gonna go to our handy dandy
to the next line and you'll be like, oh, it installed. No, no, it didn't.
Yours should look exactly like mine is
right now where it's downloading the information.
So this is gonna take a minute to get to the point where it's usable.
So we'll see you in a few seconds after this is done.
OK?
So now it's asking for a license key, which means now we have to actually register it.
So in order to register it were going to go to
bottom
right here
and we have to do community edition. We're going to do one.
I'm gonna add that to the cart
and then I have to check out
and then you can follow along throughout this.
Once you're done registering your product,
you'll see this button of access digital products.
You need to click on that,
that will open up a new web page and then you're just going to press the copy button,
we can close that down now and then we just right click and paste it in there.
Now, the basic version,
uh the paywall really does limit our capabilities with this.
So this is actually going to be quite a
short video, but we're going to go through it nonetheless.
So I'm gonna open up that terminal.
And again, I've got
two running in the background to kind of provide us some
availability to actually run a scan against a target that is actually a server. So in
order to run it, I'm going to
do a dot forward slash and then I'm gonna type in SCNR.
If I do a tab, I should be able to get the actual program that I want to run.
In this case, the scanner version 1.4 0.12
and then forward slash bin.
And then
I need to type in SC and R
and then I need to actually identify the web site that I want to hit.
Now, in my case, I'm going to actually hit my Kops
two,
which is at HTTPS word slash forward slash 10.0 0.2 0.5.
I'm gonna hit enter and it's going to run a scan against us. Now, here's the problem
with this entire program for their newest version,
the community edition, which is the free edition that we're using.
It does provide us a scan and it does provide
some results which I'll show you in a second.
Our there is no reporting
attached with this. So it is very limited in its capabilities
of what it can and cannot do.
And a matter of fact, it's not even in my opinion, really useful
at all
as a scanning agent. And again, this is one of those tools that I question why
Gallant
Tia would provide this in their, in their tool subset
for CYS A. But it is what it is right?
So we go through, we've got our plugin data,
we've got our health map and then we've got our issues with a plus sign,
no issues and with the
sign has issues
and the free version of
arachni slash code name S er does provide us and tell us that we have issues.
It's right there.
It tells us we have issues, it doesn't tell us what those issues are,
but it tells us those have issues
and then it tells us that it'ss reported,
but you can access the report on the community edition. So you can actually get to it
because it doesn't actually save a report. There's no report there.
A matter of fact, I'll show you if I go to the file structure
and open the folder.
Here's K Kendrick Gray here,
I can go to the scanner. That's it right there.
And there is literally not even a reports folder
because reports aren't available in the community.
So again,
kind of a
I don't want to say useless tool,
but there's so many better tools out there that I would utilize over this one.
And so I have zero failed jobs. It tells us how long, but this is the
limit of this tool of
a ring. However,
however, if you use the paid version,
if you unlock the paid version,
then you can go through and not only does it have a web interface that you can utilize?
It has other availabilities that you can utilize as well
and it has reporting structure and everything else. So again,
yeah,
so that's
arachni
slash codename, SCNR as always. Thank you very much and have a great one.
We'll see you next time.