Generating AcuSensor Password Hash. Parse Frame Config XML ... Acunetix Web Vulnerability Scanner, version 6.0, build 20081124 Populate application menus ... Populate tools bar ... Populate tool explorer ... Load ServerInfo XML ... Load module "Version check" ... Load module "CGI Tester" ... Load module "Parameter manipulation" ... Load module "MultiRequest parameter manipulation" ... Load module "File checks" ... Load module "Directory checks" ... Load module "Web Applications" ... Load module "Text search" ... Load module "Weak Passwords" ... Load module "GHDB - Google hacking database" ... Load module "Knowledge base" ... Load module "Web Services - Parameter manipulation" ... Load module "Web Services - Multirequest parameter manipulation" ... 13 modules loaded. Determining necesary updates ... Started scanning http://deaddrop.cc:80/ ... Start URL : http://deaddrop.cc:80/ Scanning Mode : Extensive Server banner: Apache Starting port scanner (1277 ports) Crawling started, URL: http://deaddrop.cc/ Processing file / Password type input with autocomplete enabled "/" Password type input with autocomplete enabled "/" User credentials are sent in clear text "/" Processing file /favicon.ico Broken links "/cgi-bin/charon.pl" Processing file /cgi-bin Broken links "/cgi-bin/charon.pl (POST username=test&password=test&mobilesig=)" Analyzing client side JavaScripts Analyzing file: http://deaddrop.cc/ Script analysis done HTTP sniffer started on 127.0.0.1:8080 Crawler switched to manual mode. Processing URL:http://deaddrop.cc/ Processing URL:http://www.statcounter.com/counter/counter.js Processing URL:http://c.statcounter.com/t.php Processing URL:http://c.statcounter.com/t.php Processing URL:http://www.deaddrop.cc/carathis.jpg Open port 21 - ftp Processing URL:http://deaddrop.cc/cgi-bin/charon.pl Processing URL:http://www.deaddrop.cc/xit.shtml Processing URL:http://www.deaddrop.cc/windex.html Processing URL:http://www.deaddrop.cc/xit.shtml Processing proxy results Processing file / Crawling done. Executing test modules for http://deaddrop.cc:80/ Test module: Version check (1 of 11) Version check is executing ... Version check finished. Test module: CGI Tester (2 of 11) Test module: Parameter manipulation (3 of 11) Populate list of tests ... Populate test items ... Delay 6 Test module: MultiRequest parameter manipulation (4 of 11) MultiRequest parameter manipulation is preparing ... Test module: File checks (5 of 11) File checks finished. Test module: Directory checks (6 of 11) Directory checks is executing on script "/ (1 of 2)" ... Directory checks is executing on script "/cgi-bin (2 of 2)" ... Directory checks finished. Test module: Web Applications (7 of 11) Web Applications is executing on script "/ (1 of 2)" ... Open port 80 - http Open port 110 - pop3 Web Applications is executing on script "/cgi-bin (2 of 2)" ... Open port 443 - https Web Applications finished. Test module: Text search (8 of 11) Text search is executing on script "/" ... Text search is executing on script "/cgi-bin" ... Text search is executing on script "/favicon.ico" ... Text search finished. Test module: Weak Passwords (9 of 11) Weak Passwords finished. Test module: GHDB - Google hacking database (10 of 11) GHDB - Google hacking database finished. GHDB - Google hacking database finished. Test module: Knowledge base (11 of 11) Knowledge base is executing ... Knowledge base finished. CSRF testing finished. Port scanning completed!