[ Bron: wapiti ]
Pakket: wapiti (3.2.0+dfsg-1)
Verwijzigingen voor wapiti
Debian bronnen:
Het bronpakket wapiti downloaden:
Beheerders:
Externe bronnen:
- Homepage [wapiti.sourceforge.net]
Vergelijkbare pakketten:
web application vulnerability scanner
Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scan the web pages of the deployed web applications, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.
Wapiti can detect the following vulnerabilities:
- Database Injection (PHP/ASP/JSP SQL Injections and XPath Injections) - Cross Site Scripting (XSS) reflected and permanent - File disclosure detection (local and remote include, require, fopen, readfile...) - Command Execution detection (eval(), system(), passtru()...) - XXE (Xml eXternal Entity) injection - CRLF Injection - Search for potentially dangerous files on the server (thank to the Nikto db) - Bypass of weak htaccess configurations - Search for copies (backup) of scripts on the server - Shellshock - DirBuster like - Server Side Request Forgery (through use of an external Wapiti website)
Andere aan wapiti gerelateerde pakketten
|
|
|
|
-
- dep: libjs-jquery
- JavaScript library for dynamic web applications
-
- dep: mitmproxy
- SSL-capable man-in-the-middle HTTP proxy
-
- dep: python3
- interactive high-level object-oriented language (default python3 version)
-
- dep: python3-aiocache
- multi backend asyncio cache
-
- dep: python3-aiohttp
- http client/server for asyncio
-
- dep: python3-aiosqlite
- sqlite library for Python 3 using asyncio
-
- dep: python3-arsenic
- Asynchronous WebDriver client
-
- dep: python3-bs4 (>= 4.12.3)
- error-tolerant HTML parser for Python 3
-
- dep: python3-dnspython
- DNS toolkit for Python 3
-
- dep: python3-h11
- Pure-Python, bring-your-own-I/O implementation of HTTP/1.1 (Python 3)
-
- dep: python3-httpcore
- minimal low-level HTTP client
-
- dep: python3-httpx
- next generation HTTP client
-
- dep: python3-humanize
- Python Humanize library (Python 3)
-
- dep: python3-loguru
- enjoyable loggin' for Python
-
- dep: python3-mako (>= 1.3.2)
- fast and lightweight templating for the Python 3 platform
-
- dep: python3-markupsafe
- HTML/XHTML/XML string library
-
- dep: python3-packaging
- core utilities for python3 packages
-
- dep: python3-pyasn1
- ASN.1 library for Python (Python 3 module)
-
- dep: python3-sqlalchemy
- SQL toolkit and Object Relational Mapper for Python 3
-
- dep: python3-tld
- Extract the top level domain (TLD) from a given URL (Python 3)
-
- dep: python3-typing-extensions
- Backported and Experimental Type Hints for Python
-
- dep: python3-yaswfp
- Yet Another SWF Parser (Python 3)