# AcuAutomate | Unofficial Acunetix CLI Tool For Automated Pentesting And Bug Hunting Across Large Scopes

**URL:** <https://onehack.st/t/acuautomate-unofficial-acunetix-cli-tool-for-automated-pentesting-and-bug-hunting-across-large-scopes/268678>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, hacking\
**Created:** [December 15, 2023, 9:07pm UTC](https://onehack.st/t/acuautomate-unofficial-acunetix-cli-tool-for-automated-pentesting-and-bug-hunting-across-large-scopes/268678 "2023-12-15T21:07:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [December 15, 2023, 9:07pm UTC](https://onehack.st/t/acuautomate-unofficial-acunetix-cli-tool-for-automated-pentesting-and-bug-hunting-across-large-scopes/268678/1 "2023-12-15T21:07:08Z")

</div>

# AcuAutomate

**AcuAutomate** is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It’s a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile functionality seamlessly integrates into enumeration wrappers or one-liners, offering efficient control through its pipeline capabilities.

[![alt text](https://raw.githubusercontent.com/danialhalo/AcuAutomate/main/banner.png)](https://raw.githubusercontent.com/danialhalo/AcuAutomate/main/banner.png)

## Installation

```auto
git clone https://github.com/danialhalo/AcuAutomate.git
cd AcuAutomate
chmod +x AcuAutomate.py
pip3 install -r requirements.txt

```

## Configuration (config.json)

Before using **AcuAutomate** , you need to set up the configuration file _config.json_ inside the **AcuAutomate** folder:

{ “url”: “[https://localhost](https://localhost)”, “port”: 3443, “api\_key”: “API\_KEY” }

- The **URL** and **PORT** parameter is set to default acunetix settings, However this can be changed depending on acunetix configurations.
- Replace the **API\_KEY** with your acunetix api key. The key can be obtained from user profiles at [https://localhost:3443/#/profile](https://localhost:3443/#/profile)

## Usage

The help parameter (-h) can be used for accessing more detailed help for specific actions

```auto
    		                               ______
    		  ____________  _________ / /_(_) _______ / (_)
    		 / __`/___ / / / / __\/ _ \/__ / / |/_/ _____/___ / / /
    		/ /_/ / / __/ /_/ / / / /__ / /_/ /> </ _____/ /__ / / /
    		\ __,_/\___ /\ __,_/_/ /_/\___ /\ __/_/_/|_| \___ /_/_/
    		
    		                   -: By Danial Halo :-

    
usage: AcuAutomate.py [-h] {scan,stop} ...

Launch or stop a scan using Acunetix API

positional arguments:
  {scan,stop} Action to perform
    scan Launch a scan use scan -h
    stop Stop a scan

options:
  -h, --help show this help message and exit

```

## Scan Actions

For launching the scan you need to use the scan actions:

xubuntu:~/AcuAutomate$ ./AcuAutomate.py scan -h usage: AcuAutomate.py scan [-h] [-p] [-d DOMAIN] [-f FILE] [-t {full,high,weak,crawl,xss,sql}] options: -h, --help show this help message and exit -p, --pipe Read from pipe -d DOMAIN, --domain DOMAIN Domain to scan -f FILE, --file FILE File containing list of URLs to scan -t {full,high,weak,crawl,xss,sql}, --type {full,high,weak,crawl,xss,sql} High Risk Vulnerabilities Scan, Weak Password Scan, Crawl Only, XSS Scan, SQL Injection Scan, Full Scan (by default)

### Scanning Single Target

The domain can be provided with -d flag for single site scan:

```auto
./AcuAutomate.py scan -d https://www.google.com

```

### Scanning Multiple Targets

For scanning multiple domains the domains need to be added into the file and then specify the file name with -f flag:

```auto
./AcuAutomate.py scan -f domains.txt

```

### Pipeline

The AcuAutomate can also worked with the pipeline input with -p flag:

```auto
cat domain.txt | ./AcuAutomate.py scan -p

```

This is Great 😍 as it can enable the AcuAutomate to work with other tools. For example we can use the **subfinder** , **httpx** and then pipe the output to AcuAutomate for mass scanning with acunetix:

```auto
subfinder -silent -d google.com | httpx -silent | ./AcuAutomate.py scan -p

```

### scan type

The -t flag can be used to define the scan type. For example the following scan will only detect the **SQL vulnerabilities** :

```auto
./AcuAutomate.py scan -d https://www.google.com -t sql

```

## Note

AcuAutomate only accept the domains with `http://` or `https://`

## Stop Action

The **stop** action can be used for stoping the scan either with `-d` flag for stoping scan by specifing the domain or with `-a` flage for stopping all running scans.

```auto
xubuntu:~/AcuAutomate$ ./AcuAutomate.py stop -h

    		                               ______
    		  ____________  _________ / /_(_) _______ / (_)
    		 / __`/___ / / / / __\/ _ \/__ / / |/_/ _____/___ / / /
    		/ /_/ / / __/ /_/ / / / /__ / /_/ /> </ _____/ /__ / / /
    		\ __,_/\___ /\ __,_/_/ /_/\___ /\ __/_/_/|_| \___ /_/_/
    		
    		                   -: By Danial Halo :-

    
usage: AcuAutomate.py stop [-h] [-d DOMAIN] [-a]

options:
  -h, --help show this help message and exit
  -d DOMAIN, --domain DOMAIN
                        Domain of the scan to stop
  -a, --all Stop all Running Scans

```

## Contact

Please submit any bugs, issues, questions, or feature requests under “Issues” or send them to me on Twitter. [@DanialHalo](https://twitter.com/DanialHalo)

## GitHub:

[https://github.com/danialhalo/AcuAutomate](https://github.com/danialhalo/AcuAutomate)