Scheduling Scans in Invicti Standard

Invicti Standard enables you to schedule any scan in advance. This includes both full and incremental scans, as well as scans on new or multiple instances of Invicti Standard. This document describes how to schedule a scan, how to edit a scheduled scan, how you can restrict a scan to run during a specific time using AutoHotkey, and how to configure and send automated reports on the completion of a scheduled scan.

How to schedule a scan

1. Open Invicti Standard.
2. From the ribbon, click the Home tab, then select Schedule. The Schedule a New Scan dialog will then appear.

3. Complete the Schedule a New Scan dialog.
4. Click Schedule. The Overwrite dialog is displayed.

5. Click Overwrite to save your current profile with the current name in order to create a new scheduled scan. The Schedule a Scan dialog is displayed.

6. In the Scheduled Task section:

1. Enter a Name for the scan
2. In the Run as User field, enter the user's name
3. In the Password field, enter the password

7. Enable the Run only when user is logged on checkbox, if required.
8. In the Recurrence section:

1. In the Run Scan on field, enter the date and time
2. In the and repeat dropdown, select the recurrence option:

• Never (Scan will run ONE TIME)
• DAILY
• WEEKLY
• MONTHLY

8. Enable the After scan, export these reports checkbox to activate scan exports, then from the dropdown, select which type of Report to export.
9. In the Save location box, enter an alternative location, if required. Otherwise, the report will export to the default location on your local machine (C:\Users\[username]\Documents\Invicti\Reports\[report name] (Default-[date][time]).[ext]).
10. Click Save.

How to edit a scheduled scan

1. Press the Windows logo key .
2. Search for Task Scheduler.
3. From the Task Scheduler window, select Task Scheduler Library.
4. Double-click Invicti - [name of the scheduled scan]. (This example uses Schedule.)

5. From the Invicti - Schedule Properties window, select the Trigger tab.
6. Select Edit.

7. Make necessary changes to your scheduled scan(s).

8. Select OK to save the changes.

How to restrict scans to run during a specific time

1. Download and install AutoHotkey, an open source utility that can be used to find the running instance of Invicti Desktop, and trigger the keys that resume and pause scans.
2. Download the following AutoHotkey scripts, which will be used to pause and resume the web security scans:

• resumenetsparker.ahk
• pausenetsparker.ahk

3. Configure all the scan parameters (such as Target URL, Scan Policy, and Reports Policy).
4. Launch the scan.
5. Pause the scan as soon as it starts.
6. Once the scan is paused, configure two Windows Task Schedules:

• One for resumenetsparker.ahk at the scan starting time
• One for pausenetsparker.ahk at the scan finishing time

The scan will be resumed automatically when the first scheduled task starts, and if it is not finished by the finishing time, it will be paused automatically by the scheduled task

How to configure automated scheduled scan email reports

Using Powershell scripting, you can configure an automatic email to be sent with the scan report attached upon completion of a scheduled scan.

1. Download the files ScanAndMail.rar and urls.txt files from Invicti.
2. Copy the files ScanAndMail.ps1 and urls.txt files to the Invicti installation folder on your local machine.
3. Open ScanAndMail.ps1 with a text editor and specify the SMTP server and mail settings from lines 3 to 11.
4. Open urls.txt with a text editor, and specify the URL of the web application you would like to scan and the path of where to save the scan report, separated with a semicolon. To scan multiple websites, specify the same parameters for each website in a new line.
5. Once all the settings are configured, use Powershell to execute the script, which creates a Windows Scheduled Task and launches the scan(s):

Powershell –ExecutionPolicy Unrestricted –File "C:\Program Files (x86)\Invicti\ScanAndMail.ps1