loading
Loading content
loading
Scanners
Opinionated twa web audits, one pass over a domain list.
overview
twa-loop takes a file of domain hostnames and runs the same twa checklist on each one: security headers, cookie attributes, common development ports, and TLS posture. One run gives a hygiene read across an estate instead of a single site.
Flags match twa and apply per host. Enable -s for testssl certificate and cipher review, -w to also audit the www variant, and -d to skip development-port probes. Verbose mode (-v) writes detail to stderr.
Trickest runs twa-loop as a managed scanner node that reads a domains file and emits a file plus a results folder. Place it after subdomain enumeration or a live-host filter when you want one baseline for every host.
source github.com/trailofbits/twa
use cases
Feed twa-loop the output of subdomain discovery so every host gets the same header, cookie, and TLS checklist in one pass.
Run a consistent audit across the estate to surface the one host with a missing header or weak cipher while every other host is clean.
Enable -s so testssl runs against each domain, extending the audit to certificate validity and protocol versions for the whole list.
Turn on -w so both the apex and www host of every domain in the file are audited, catching per-host redirect and header drift.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domains | FILE | · | File of domain hostnames to scan. |
| test-ssl | BOOLEAN | -s | Audit each site and include testssl for a deeper TLS review. |
| check-www | BOOLEAN | -w | Audit each site and its www subdomain. |
| no-ports | BOOLEAN | -d | Audit each site without scanning common development ports. |
| verbose | BOOLEAN | -v | Audit each site and be verbose on stderr. |
Showing key inputs. twa-loop exposes 5 inputs in total.
example
# audit each domain in the list; skip dev ports; include www# twa-loop wraps: twa -d -w <domain>while read -r d; do twa -d -w "$d"; done < domains.txtwww.example.com PASS headersapi.example.com FAIL missing CSPapp.example.com PASS cookiesstaging.example.com FAIL open port 3000dev.example.com PASS tlsmail.example.com FAIL missing HSTScdn.example.com PASS headersguidance
Use twa-loop when you have a host list and want the same opinionated baseline on every domain. For a single host, use twa. For WAF fingerprinting or template CVE coverage, chain wafw00f or nuclei after it.
Same checklist for one domain instead of a file.
Broader nikto checks over a host list. twa-loop stays a tighter, fixed audit.
Fingerprints the WAF in front of each host. Complements the twa-loop baseline.
faq
related
Reflection triage for parameter URLs during recon.
CMS detection and version fingerprinting.
Signature-driven web application scanner.
OWASP Joomla vulnerability scanner for CMS flaws and misconfigurations.
Bundled web server checks for dangerous files and outdated software.
Bypass 403/40X restrictions through smart request manipulation.
A file of domains feeds twa-loop, which runs the opinionated twa checklist against each host and writes the per-host audits as a queryable output.
Facts on this page come from the live Trickest tool library.