パッケージ: wapiti (3.0.4+dfsg-1)
wapiti に関するリンク
Debian の資源:
wapiti ソースパッケージをダウンロード:
メンテナ:
外部の資源:
- ホームページ [wapiti.sourceforge.net]
類似のパッケージ:
web application vulnerability scanner
Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scan the web pages of the deployed web applications, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.
Wapiti can detect the following vulnerabilities:
- Database Injection (PHP/ASP/JSP SQL Injections and XPath Injections) - Cross Site Scripting (XSS) reflected and permanent - File disclosure detection (local and remote include, require, fopen, readfile...) - Command Execution detection (eval(), system(), passtru()...) - XXE (Xml eXternal Entity) injection - CRLF Injection - Search for potentially dangerous files on the server (thank to the Nikto db) - Bypass of weak htaccess configurations - Search for copies (backup) of scripts on the server - Shellshock - DirBuster like - Server Side Request Forgery (through use of an external Wapiti website)
その他の wapiti 関連パッケージ
|
|
|
|
-
- dep: libjs-jquery
- JavaScript library for dynamic web applications
-
- dep: python3
- 対話式の高レベルオブジェクト指向言語 (デフォルト python3 バージョン)
-
- dep: python3-bs4
- error-tolerant HTML parser for Python 3
-
- dep: python3-importlib-metadata
- library to access the metadata for a Python package - Python 3.x
-
- dep: python3-mako (>= 1.1.2)
- fast and lightweight templating for the Python 3 platform
-
- dep: python3-markupsafe
- HTML/XHTML/XML string library for Python 3
-
- dep: python3-requests
- 人間のために作られた、Python 3 向けの洗練された単純な HTTP ライブラリ
-
- dep: python3-six (>= 1.15.0)
- Python 2 と 3 の互換性ライブラリー(Python 3 インターフェイス)
-
- dep: python3-socks
- Python 3 SOCKS client module
-
- dep: python3-tld
- Extract the top level domain (TLD) from a given URL (Python 3)
-
- dep: python3-yaswfp
- Yet Another SWF Parser (Python 3)