loading
Loading content
loading
Scanners
Opinionated twa web audits, one pass over a domain list.
overview
twa-loop takes a file of domain hostnames and runs the same twa checklist on each one: security headers, cookie attributes, common development ports, and TLS posture. One run gives a hygiene read across an estate instead of a single site.
Flags match twa and apply per host. Enable -s for testssl certificate and cipher review, -w to also audit the www variant, and -d to skip development-port probes. Verbose mode (-v) writes detail to stderr.
Trickest runs twa-loop as a managed scanner node that reads a domains file and emits a file plus a results folder. Place it after subdomain enumeration or a live-host filter when you want one baseline for every host.
source github.com/trailofbits/twa
use cases
Feed twa-loop the output of subdomain discovery so every host gets the same header, cookie, and TLS checklist in one pass.
Run a consistent audit across the estate to surface the one host with a missing header or weak cipher while every other host is clean.
Enable -s so testssl runs against each domain, extending the audit to certificate validity and protocol versions for the whole list.
Turn on -w so both the apex and www host of every domain in the file are audited, catching per-host redirect and header drift.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domains | FILE | · | File of domain hostnames to scan. |
| test-ssl | BOOLEAN | -s | Audit each site and include testssl for a deeper TLS review. |
| check-www | BOOLEAN | -w | Audit each site and its www subdomain. |
| no-ports | BOOLEAN | -d | Audit each site without scanning common development ports. |
| verbose | BOOLEAN | -v | Audit each site and be verbose on stderr. |
Showing key inputs. twa-loop exposes 5 inputs in total.
example
# audit each domain in the list; skip dev ports; include www# twa-loop wraps: twa -d -w <domain>while read -r d; do twa -d -w "$d"; done < domains.txtwww.example.com PASS headersapi.example.com FAIL missing CSPapp.example.com PASS cookiesstaging.example.com FAIL open port 3000dev.example.com PASS tlsmail.example.com FAIL missing HSTScdn.example.com PASS headersguidance
Use twa-loop when you have a host list and want the same opinionated baseline on every domain. For a single host, use twa. For WAF fingerprinting or template CVE coverage, chain wafw00f or nuclei after it.
Same checklist for one domain instead of a file.
Broader nikto checks over a host list. twa-loop stays a tighter, fixed audit.
Fingerprints the WAF in front of each host. Complements the twa-loop baseline.
faq
related
Reflection triage for parameter URLs during recon.
CMS detection and version fingerprinting.
OWASP Joomla vulnerability scanner for CMS flaws and misconfigurations.
Bundled web server checks for dangerous files and outdated software.
Bypass 403/40X restrictions through smart request manipulation.
YAML template scanner for live hosts; scope runs with tags and severity.
A file of domains feeds twa-loop, which runs the opinionated twa checklist against each host and writes the per-host audits as a queryable output.
Facts on this page come from the live Trickest tool library.