Wapiti Scan icon

Wapiti Scan

Scan with Wapiti

Actions3

Full Scan Wapiti

AI-generated

Overview

This node performs a full security scan on a specified target website using Wapiti, a web vulnerability scanner. It is useful for security professionals and developers who want to identify vulnerabilities in their web applications by scanning with various modules and options. For example, it can scan a website's domain with a specified depth and modules, optionally routing traffic through a SOCKS proxy or using Cloudflare Access headers.

Use Case Examples

  1. Perform a full scan on https://example.com with default modules and depth 3.
  2. Scan a website using a SOCKS proxy to anonymize traffic.
  3. Use Cloudflare Access credentials to authenticate the scan.

Properties

Name Meaning
Target Website The URL of the website to be scanned.
Depth Maximum link depth to crawl from the starting URL during the scan.
Modules Comma-separated list of Wapiti modules to use during the scan.
Put Result in Field The name of the output field where the scan results will be stored.
Scope The scan scope, such as domain, folder, page, punk, or URL.
SOCKS Proxy Optional SOCKS proxy address to route traffic through (e.g., Tor).
Use Cloudflare Access Enable Cloudflare Access headers using the selected credential for authentication.

Output

JSON

  • wapiti - The JSON-formatted results of the Wapiti full scan on the target website.

Dependencies

  • Wapiti command-line tool must be installed and accessible in the environment where the node runs.
  • Optional Cloudflare Access API credentials for authenticated scans.

Troubleshooting

  • Ensure Wapiti is installed and accessible in the system PATH; otherwise, the scan command will fail.
  • If using Cloudflare Access, verify that valid credentials are provided; missing or invalid credentials will cause authentication errors.
  • Check that the target website URL is valid and reachable; network issues or incorrect URLs will cause scan failures.
  • If using a SOCKS proxy, ensure the proxy is running and accessible at the specified address.

Links

  • Wapiti Official Website - Official site for the Wapiti web vulnerability scanner, providing documentation and downloads.

Discussion