Pakiet: wapiti (3.2.4+dfsg-2)

[ Pakiet źródłowy: wapiti  ]

web application vulnerability scanner

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scan the web pages of the deployed web applications, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.

Wapiti can detect the following vulnerabilities:

 - Database Injection (PHP/ASP/JSP SQL Injections and XPath Injections)
 - Cross Site Scripting (XSS) reflected and permanent
 - File disclosure detection (local and remote include, require, fopen,
   readfile...)
 - Command Execution detection (eval(), system(), passtru()...)
 - XXE (Xml eXternal Entity) injection
 - CRLF Injection
 - Search for potentially dangerous files on the server (thank to the Nikto db)
 - Bypass of weak htaccess configurations
 - Search for copies (backup) of scripts on the server
 - Shellshock
 - DirBuster like
 - Server Side Request Forgery (through use of an external Wapiti website)

Znaczniki: Zaimplementowane w: Python, Rola: Program, Bezpieczeństwo: Wymaga dodatkowego znacznika, Przeznaczenie: Analizowanie

Inne pakiety związane z wapiti

• dep: libjs-jquery

  JavaScript library for dynamic web applications

• dep: mitmproxy

  SSL-capable man-in-the-middle HTTP proxy

• dep: python3

  Interaktywny, wysokopoziomowy i obiektowy język programowania (domyślna wersja Python 3)

• dep: python3-aiocache

  multi backend asyncio cache

• dep: python3-aiohttp

  http client/server for asyncio

• dep: python3-aiosqlite

  sqlite library for Python 3 using asyncio

• dep: python3-bs4 (>= 4.12.3)

  error-tolerant HTML parser for Python 3

• dep: python3-dnspython

  DNS toolkit for Python 3

• dep: python3-h11

  Pure-Python, bring-your-own-I/O implementation of HTTP/1.1 (Python 3)

• dep: python3-httpcore

  minimal low-level HTTP client

• dep: python3-httpx

  next generation HTTP client

• dep: python3-humanize

  Python Humanize library (Python 3)

• dep: python3-loguru

  enjoyable loggin' for Python

• dep: python3-mako (>= 1.3.2)

  Tworzenie szybkich i lekkich szablonów na platformę Pythona 3

• dep: python3-markupsafe

  HTML/XHTML/XML string library

• dep: python3-msgpack

  Python 3 implementation of MessagePack format

• dep: python3-packaging

  core utilities for python3 packages

• dep: python3-pyasn1 (>= 0.5.1)

  ASN.1 library for Python (Python 3 module)

• dep: python3-sqlalchemy (>= 2.0.40)

  SQL toolkit and Object Relational Mapper for Python 3

• dep: python3-tld

  Extract the top level domain (TLD) from a given URL (Python 3)

• dep: python3-typing-extensions

  Backported and Experimental Type Hints for Python

• dep: python3-urwid

  curses-based UI/widget library for Python 3

• dep: python3-yaswfp

  Yet Another SWF Parser (Python 3)

Pobieranie wapiti

Pobierz dla wszystkich dostępnych architektur

Architektura	Rozmiar pakietu	Rozmiar po instalacji	Pliki
all	540,4 KiB	3 378,0 KiB	[lista plików]