Пакет: wapiti (3.0.4+dfsg-1)

[ Источник: wapiti  ]

web application vulnerability scanner

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scan the web pages of the deployed web applications, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.

Wapiti can detect the following vulnerabilities:

 - Database Injection (PHP/ASP/JSP SQL Injections and XPath Injections)
 - Cross Site Scripting (XSS) reflected and permanent
 - File disclosure detection (local and remote include, require, fopen,
   readfile...)
 - Command Execution detection (eval(), system(), passtru()...)
 - XXE (Xml eXternal Entity) injection
 - CRLF Injection
 - Search for potentially dangerous files on the server (thank to the Nikto db)
 - Bypass of weak htaccess configurations
 - Search for copies (backup) of scripts on the server
 - Shellshock
 - DirBuster like
 - Server Side Request Forgery (through use of an external Wapiti website)

Теги: Реализовано на: Python, Роль: Программа, Безопасность: Требуется дополнительный тег, Цель: Анализ

Другие пакеты, относящиеся к wapiti

• dep: libjs-jquery

  JavaScript library for dynamic web applications

• dep: python3

  интерактивный высокоуровневый объектно-ориентированный язык (версия python3 по умолчанию)

• dep: python3-bs4

  error-tolerant HTML parser for Python 3

• dep: python3-importlib-metadata

  library to access the metadata for a Python package - Python 3.x

• dep: python3-mako (>= 1.1.2)

  fast and lightweight templating for the Python 3 platform

• dep: python3-markupsafe

  HTML/XHTML/XML string library for Python 3

• dep: python3-requests

  elegant and simple HTTP library for Python3, built for human beings

• dep: python3-six (>= 1.15.0)

  Python 2 and 3 compatibility library (Python 3 interface)

• dep: python3-socks

  Python 3 SOCKS client module

• dep: python3-tld

  Extract the top level domain (TLD) from a given URL (Python 3)

• dep: python3-yaswfp

  Yet Another SWF Parser (Python 3)

Загрузка wapiti

Загрузить для всех доступных архитектур

Архитектура	Размер пакета	В установленном виде	Файлы
all	331,8 Кб	1 582,0 Кб	[список файлов]