Automated Audit using WAPITI - Revision history

Imifos at 10:40, 21 January 2016

2016-01-21T10:40:30Z

Imifos at 12:29, 22 December 2015

2015-12-22T12:29:15Z

Imifos at 12:05, 22 December 2015

2015-12-22T12:05:31Z

Imifos at 09:22, 7 December 2015

2015-12-07T09:22:47Z

Mlantz at 04:25, 14 January 2015

2015-01-14T04:25:57Z

Mlantz at 04:23, 14 January 2015

2015-01-14T04:23:58Z

Mlantz: /* Report */

2015-01-14T04:22:40Z

‎Report

Mlantz at 04:21, 14 January 2015

2015-01-14T04:21:56Z

Mlantz at 04:21, 14 January 2015

2015-01-14T04:21:27Z

Dominique RIGHETTO: Remove warning about source code update

2015-01-02T10:14:21Z

Remove warning about source code update

@@ Line 45: / Line 45: @@
 [[Category:Automated Audit]]
 [[Category:Externally Linked Page]]
-[[Category:OWASP Python Project]]
+[[Category:Python]]
 [[Category:Python Tool]]

@@ Line 43: / Line 43: @@
 A sample TXT report is available [http://wapiti.sourceforge.net/example.txt here].
 [[Category:Automated Audit]]
 [[Category:Externally Linked Page]]
 [[Category:OWASP Python Project]]
 [[Category:Python Tool]]

← Older revision		Revision as of 12:05, 22 December 2015
Line 47:		Line 47:
	[[Category:Externally Linked Page]]		[[Category:Externally Linked Page]]
	[[Category:OWASP Python Project]]		[[Category:OWASP Python Project]]
		+	[[Category:Python Tool]]

@@ Line 46: / Line 46: @@
 [[Category:Automated Audit]]
 [[Category:Externally Linked Page]]
-[[Category:Python]]
+[[Category:OWASP Python Project]]

@@ Line 5: / Line 5: @@
 Please be aware this command line does not replace a manual audit but can be useful to perform a first validation or exploration of legacy projects.
-== Command line ==
+== Requirements ==
 <pre>python wapiti http://mysite.com -n 10 -b folder -u -v 1 -f html -o /tmp/scan_report</pre>

← Older revision		Revision as of 04:23, 14 January 2015
Line 1:		Line 1:
−	~~Last revision (mm/dd/yy): '''01/13/2015'''~~
−	~~<pre style="color:#088A08">This type of article aims to provide to development teams an easy/quick way~~
−	~~to perform automated audit tests against their web application projects.</pre>~~
−
	== Description ==		== Description ==

@@ Line 37: / Line 37: @@
 == Report ==
-A sample HTML report is available [http://www.ict-romulus.eu/web/wapiti/wiki/-/wiki/Main/Wapiti%20HTML%20Report here].
+A sample TXT report is available [http://wapiti.sourceforge.net/example.txt here].
 [[Category:Code Snippet]]

@@ Line 1: / Line 1: @@
 Last revision (mm/dd/yy): '''01/13/2015'''
 <pre style="color:#088A08">This type of article aims to provide to development teams an easy/quick way
-to perform automated audit tests against their web application projects over implementation phase.</pre>
+to perform automated audit tests against their web application projects.</pre>
 == Description ==

@@ Line 1: / Line 1: @@
-Last revision (mm/dd/yy): '''02/19/2012'''
+Last revision (mm/dd/yy): '''01/13/2015'''
-<pre style="color:#088A08">This type of article aims to provide to development team a easy/quick way
+<pre style="color:#088A08">This type of article aims to provide to development teams an easy/quick way
 to perform automated audit tests against their web application projects over implementation phase.</pre>
 == Description ==
-This page have to objective to show a WAPITI sample command line to automate audit of a web application.
+WAPITI is a simple command line to tool to automate the audit of a web application. It's free and open source and has had some recent edits and updates ([http://wapiti.sourceforge.net/ WAPITI homepage]). The application is available for contribution at ([http://sourceforge.net/projects/wapiti/ WAPITI Repository]).
-WAPITI is a free and open source tools to audit the security of your web applications ([http://www.ict-romulus.eu/web/wapiti/ WAPITI homepage]).
+Please be aware this command line does not replace a manual audit but can be useful to perform a first validation or exploration of legacy projects.
 == Command line ==
-<pre>python wapiti.py http://mysite.com -n 10 -b folder -u -v 1 -f html -o /tmp/scan_report</pre>
+<pre>python wapiti http://mysite.com -n 10 -b folder -u -v 1 -f html -o /tmp/scan_report</pre>
 '''Options used:'''
 * -n: Define a limit of urls to read with the same pattern (prevent endless loops), here limit to 10.
-* -b: Set the scope of the scan, here we analyse all the links to the pages which are in the same domain as the URL passed.
+* -b: Set the scope of the scan, here we analyze all the links to the pages which are in the same domain as the URL passed.
 * -u: Use color to highlight vulnerables parameters in output.
 * -v: Define verbosity level, here we print each url.
@@ Line 34: / Line 32: @@
 * ''sql'': Standard error-based SQL injection scanner.
 * ''xss'': Module for XSS detection.
 == Report ==

← Older revision		Revision as of 10:14, 2 January 2015
Line 8:		Line 8:

	WAPITI is a free and open source tools to audit the security of your web applications ([http://www.ict-romulus.eu/web/wapiti/ WAPITI homepage]).		WAPITI is a free and open source tools to audit the security of your web applications ([http://www.ict-romulus.eu/web/wapiti/ WAPITI homepage]).
−
−	~~<pre style="color:red">~~
−	~~The tools seems to be not updated since 2009 (according to last release and last SVN commit) but it can be used with others~~
−	~~automated audit tools in order to have differents feedback on audited application security level.~~
−	~~</pre>~~

	''This command line do not replace a manual audit but can be useful to perform a first validation''.		''This command line do not replace a manual audit but can be useful to perform a first validation''.