Wapiti Scan icon

Wapiti Scan

Scan with Wapiti

Actions3

Quick Scan Wapiti

AI-generated

Overview

This node performs a quick security scan on a specified website using Wapiti, a web vulnerability scanner. It is useful for identifying potential security issues on web applications by crawling the target site up to a defined link depth and scanning with selected modules. Practical applications include automated security testing in CI/CD pipelines or routine vulnerability assessments of web assets.

Use Case Examples

  1. Quickly scan a corporate website to detect common vulnerabilities before deployment.
  2. Perform a security check on a client's website to identify potential risks and generate a report for remediation.

Properties

Name Meaning
Target Website The URL of the website to be scanned.
Depth Maximum link depth to crawl from the starting URL during the scan.
Modules Comma-separated list of Wapiti modules to use during the scan, defining the types of vulnerabilities to check.
Put Result in Field The name of the output JSON field where the scan results will be stored.
Scope Defines the scan scope such as domain, folder, page, punk, or URL.
SOCKS Proxy Optional SOCKS proxy address to route traffic through, e.g., Tor proxy at 127.0.0.1:9050.
Use Cloudflare Access Boolean flag to enable Cloudflare Access headers using selected credentials for authenticated scanning.

Output

JSON

  • wapiti - JSON object containing the results of the Wapiti quick scan.

Dependencies

  • Wapiti command-line tool must be installed and accessible in the environment where the node runs.
  • Optional Cloudflare Access API credentials for authenticated scans.

Troubleshooting

  • Ensure Wapiti is installed and accessible in the system PATH; otherwise, the scan command will fail.
  • If using Cloudflare Access, verify that valid credentials are provided; missing or invalid credentials will cause authentication errors.
  • Check that the target website URL is correct and reachable; network issues or incorrect URLs will cause scan failures.
  • If using a SOCKS proxy, ensure the proxy is running and accessible at the specified address.

Links

  • Wapiti Official Website - Official site for the Wapiti web vulnerability scanner, providing documentation and downloads.

Discussion