{"action":"created","issue":{"url":"https://api.github.com/repos/Arachni/arachni/issues/557","labels_url":"https://api.github.com/repos/Arachni/arachni/issues/557/labels{/name}","comments_url":"https://api.github.com/repos/Arachni/arachni/issues/557/comments","events_url":"https://api.github.com/repos/Arachni/arachni/issues/557/events","html_url":"https://github.com/Arachni/arachni/issues/557","id":60076984,"number":557,"title":"Inconsistent result using v1.0.6-0.5.6 & v1.0.6(+)","user":{"login":"bstream","id":3505504,"avatar_url":"https://avatars.githubusercontent.com/u/3505504?v=3","gravatar_id":"","url":"https://api.github.com/users/bstream","html_url":"https://github.com/bstream","followers_url":"https://api.github.com/users/bstream/followers","following_url":"https://api.github.com/users/bstream/following{/other_user}","gists_url":"https://api.github.com/users/bstream/gists{/gist_id}","starred_url":"https://api.github.com/users/bstream/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bstream/subscriptions","organizations_url":"https://api.github.com/users/bstream/orgs","repos_url":"https://api.github.com/users/bstream/repos","events_url":"https://api.github.com/users/bstream/events{/privacy}","received_events_url":"https://api.github.com/users/bstream/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-03-06T09:13:55Z","updated_at":"2015-03-06T13:55:27Z","closed_at":null,"body":"I have been trying out different versions of arachni against WIVET v4 and I seem to get inconsistency between versions and I cannot figure out why. The inconsistency displays itself in the way arachni behaves for different versions (and different builds of the same version?) running the exact same command.\r\n\r\nSteps to reproduce:\r\n* Download [Linux x86 32bit](http://downloads.arachni-scanner.com/arachni-1.0.6-0.5.6-linux-i686.tar.gz) from arachni [downloads page](http://www.arachni-scanner.com/download/).\r\n* Start a scan with \r\n```\r\n./bin/arachni http://<redactedURL>/wivet/ --checks trainer --audit-links --audit-forms --scope-exclude-pattern=logout --scope-exclude-pattern=100\\.php --scope-exclude-pattern=offscanpages --http-cookie-string=\"PHPSESSID=hums43b9hqftep444effgav547\"\r\n```\r\nFor me, this results in a scan that reaches 50% in 3 minutes and then continues running for 15-20 minutes with a result of **96%**. \r\n* clone arachni repo and build arachni as explained in the v1.1 branch.\r\n* Again start a scan (from the \"new\" folder git-v1.1) with the same command as above (exchanging the PHPSESSID-cookie for a fresh run. This results in a scan that reaches 50% completion in ~20 seconds (note difference from above) but it stops there. It never reaches any higher than **50%**.\r\n* *From here the problem seems to be with the v1.1 branch but trying both master and release/v1.0.6 I get the same results (50%)*.\r\n\r\nI noticed that when running arachni from arachni-1.0.6-0.5.6 it spawns a browsercluster which none of the other versions seem to do. \r\n\r\nIt looks as though the default parameters differ between the versions but that is only speculations since I have not found any proof for this. \r\n\r\nThe system I used is Ubuntu 14.04.3 LTS 32-bit (with 2 GB RAM) running in a virtualbox on a Windows 7 host."},"comment":{"url":"https://api.github.com/repos/Arachni/arachni/issues/comments/77561655","html_url":"https://github.com/Arachni/arachni/issues/557#issuecomment-77561655","issue_url":"https://api.github.com/repos/Arachni/arachni/issues/557","id":77561655,"user":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"created_at":"2015-03-06T13:55:27Z","updated_at":"2015-03-06T13:55:27Z","body":"Not sure if that'll make a difference, the same dependency will need to be installed in the process. Do let me know how it goes though either way."}}