Comments on: wapiti – web application vulnerability scanner (super quick review/intro)

By: Dave B

Dave B — Mon, 28 Nov 2011 14:24:07 +0000

Hi David,
Great introductory article
Been looking at wapiti (thanks to your site) for a little while and managed to get it to output results in most cases but sometimed I just get Timeouts on the pages. I looked at using the -n parameter to see if this would help but without success. Is there any chance you could post some examples of using the various parameters that wapiti supports?
Thanks,
Dave

By: David Goodwin

David Goodwin — Mon, 11 Jul 2011 19:16:45 +0000

The format of the cookies file has changed – it’s now a nested xml file… which is being awkward about being posted in here…

By: devloop

devloop — Tue, 29 Dec 2009 08:33:31 +0000

Hello !

A new version of Wapiti (2.2.0) is available since yesterday.
Several new attack modules were added (must be activated with the -m option)

By: didier

didier — Thu, 03 Dec 2009 10:12:44 +0000

thanks for the innteresting article, we had use a similar tools SaaS online web application vulnerabilities scanr from GamaSec http://www.gamasec.com

GamaSec identifies application vulnerabilities ( e.g. Cross Site Scripting (XSS), SQL injection, Code Inclusion etc.. ) as well as site exposure risk, ranks threat priority, produces highly graphical, intuitive HTML reports, and indicates site security posture by vulnerabilities and threat exposure.

We were very satisfy with the report and the technical part of the report providing clear recommendation to closed the finding vulnerabilities also the price of the annual servie and the on demand scan schedular was a good add value to the service of http://www.gamasec.com