AWVS (Acunetix Web Vulnerability Scanner) Docker Installation

Acunetix is not just a web vulnerability scanner. With the deployment in a docker environment, just one person with one computer, this complete web application security testing solution can be used as standalone scanning tool to complete a complex scanning task.

This post shows how to search, install AWVS docker using command line or Portainer, and how to change default credential information. 

From Acunetix minimum system requeirements documentation, minimum of 2GB Ram will be required. Based on my testing, 1GB Ram is also working well. 

[root@OCP1-CentOS8 ~]# free
              total        used        free      shared  buff/cache   available
Mem:         823684      258292      120892        1904      444500      553072
Swap:           0            0         0

Basic command: 

wget https://raw.githubusercontent.com/51sec/swap/main/swap.sh && bash swap.sh

Search AWVS docker

The easiest way to find out which AWVS image you should use is to search and use the one having the most stars.

test@test1:~# sudo -i
root@test1:~# docker search awvs
NAME                       DESCRIPTION                                     STARS     OFFICIAL   AUTOMATED
secfa/docker-awvs          AWVS 14.4.210816098  Linux Version Crack By …   53                   
leishianquan/awvs-nessus                                                   21                   
xrsec/awvs                 Awvs 14 Scanner、fahai                           5                    
lazj/awvs13                                                                1                    
tiancizzz/awvs             一款知名的网络漏洞扫描工具                                   1                    
k3rwin/awvs13                                                              0                    
hangezhao/awvs                                                             0                    
xxlm/awvs13cn                                                              0                    
smarttang/awvs_2019_07                                                     0                    
xfantasy/awvs                                                              0                    
110110/awvs13                                                              0                    
zeyanlin/awvs                                                              0                    
jstang/awvs                配置了API密钥的容器镜像                                   0                    
littlehoury/awvs           A wonderful virtual sleep                       0                    
meterpreter/awvs                                                           0                    
yakoazz/awvsnessus                                                         0                    
saline/awvsengine                                                          0                    
evil0x0/awvs                                                               0                    
sigle0724/awvs                                                             0                    
xschur666/awvs                                                             0                    
nienie/awvs13                                                              0                    
yimingy72/awvs14                                                           0                    
cure0jvs/awvs-engine                                                       0                    
ganl/awvs                                                                  0                    
srsecmmm/awvs13            分布式部署                                           0                    
root@test1:~# 

secfa/docker-awvs has the most stars than other docker docker images.

Docker hub: https://hub.docker.com/r/secfa/docker-awvs

Create AWVS container

From Command line:

root@test1:~# docker pull secfa/docker-awvs
Using default tag: latest
latest: Pulling from secfa/docker-awvs
Digest: sha256:b2737b3decd0729a2f87a803f6b539ef63519fd24e938a9b7c31e9faf4ca7a10
Status: Image is up to date for secfa/docker-awvs:latest
docker.io/secfa/docker-awvs:latest
root@test1:~# 

root@test1:~# docker run -it -d -p 3443:3443 secfa/docker-awvs

From Portainer:

I am using port 3443 to map into docker’s 3443. On your cloud VPS, please make sure port 3443 has been opened for AWVS web gui access. 

Access AVWS and Change Username/Email + Password

Log in Web Gui

Once AWVS docker is up and running, visit https://YOUR_Public_IP:3443/

Default Credential for login:

• Username:[email protected]
• password:Admin123

You can change password after logged in. 

Change Password:

Change Email / Username:

From Command line:

docker ps                    //查看容器,找到相应id
docker exec -it id /bin/bash //进入容器
cd /home/acunetix/.acunetix
./change_credentials.sh

Add a Target to Scan

Add Tragets:

Scan Result:

References