Details

Category: Scanners

Publisher: trickest-mhmdiaa

Created Date: 9/7/2022

Container: quay.io/trickest/wapiti:3.1.3

Source URL: https://github.com/wapiti-scanner/wapiti

Parameters

url
string
required
Command: --url - The base URL used to define the scan scope
data
string
Command: --data - Urlencoded data to send with the base URL if it is a POST request
skip
string
Command: --skip - Skip attacking given parameter(s)
color
boolean
Command: --color - Colorize output
depth
string
Command: --depth - Set how deep the scanner should explore the website
level
string
Command: --level - Set attack level
proxy
string
Command: --proxy - Set the HTTP(S) proxy to use. Supported: http(s) and socks proxies
scope
string
Command: --scope - Set scan scope (page, folder, domain, url, or punk)
start
string
Command: --start - Adds a url to start scan with
tasks
string
Command: --tasks - Number of concurrent tasks to use for the exploration (crawling) of the target.
cookie
file
Command: --cookie - Set a JSON cookie file to use.
format
string
Command: --format - Set output format. Supported: csv, html, json, txt, xml. Default is html.
header
string
Command: --header - Set a custom header to use for every requests
module
string
Command: --module - List of modules to load
remove
string
Command: --remove - Remove this parameter from urls
exclude
string
Command: --exclude - Adds a url to exclude from the scan
timeout
string
Command: --timeout - Set timeout for requests in seconds
verbose
string
Command: --verbose - Set verbosity level (0: quiet, 1: normal, 2: verbose)
endpoint
string
Command: --endpoint - URL serving as endpoint for both attacker and target
auth-cred
string
Command: --auth-cred - Set HTTP authentication credentials
auth-type
string
Command: --auth-type - Set the authentication type to use (basic, digest, ntlm, or post)
scan-force
string
Command: --scan-force - Easy way to reduce the number of scanned and attacked URLs. Possible values: paranoid, sneaky, polite, normal, aggressive, insane
user-agent
string
Command: --user-agent - Set a custom user-agent to use for every requests
verify-ssl
string
Command: --verify-ssl - Set SSL check (0 or 1, default is 0)
dns-endpoint
string
Command: --dns-endpoint - Domain serving as DNS endpoint for Log4Shell attack
no-bugreport
boolean
Command: --no-bugreport - Don't send automatic bug report when an attack module fails
max-scan-time
string
Command: --max-scan-time - Set how many seconds you want the scan to last (floats accepted)
max-parameters
string
Command: --max-parameters - URLs and forms having more than MAX input parameters will be erased before attack.
drop-set-cookie
boolean
Command: --drop-set-cookie - Ignore Set-Cookie header from HTTP responses
max-attack-time
string
Command: --max-attack-time - Set how many seconds you want each attack module to last (floats accepted)
external-endpoint
string
Command: --external-endpoint - URL serving as endpoint for target
internal-endpoint
string
Command: --internal-endpoint - URL serving as endpoint for attacker
max-files-per-dir
string
Command: --max-files-per-dir - Set how many pages the scanner should explore per directory
max-links-per-page
string
Command: --max-links-per-page - Set how many (in-scope) links the scanner should extract for each page