Wapiti Scan icon

Wapiti Scan

Scan with Wapiti

Text Report Wapiti

AI-generated

Overview

This node performs a security scan on a specified target website using Wapiti and retrieves a text report of the scan results. It is useful for security professionals or developers who want to analyze the vulnerabilities of a website and obtain a detailed text report for review or further processing.

Use Case Examples

  1. Scan a website to generate a text report of potential security issues using Wapiti.
  2. Use the node to automate security assessments and collect text-based scan reports for compliance or auditing purposes.

Properties

Name Meaning
Target Website The URL of the website to be scanned.
Options Additional scan options including depth of crawl, modules to use, output field name, scan scope, SOCKS proxy settings, and whether to use Cloudflare Access headers.

Output

JSON

  • wapiti - The text report output from the Wapiti scan, stored as a string in the specified output field.

Dependencies

  • Wapiti command-line tool must be installed and accessible in the environment where the node runs.
  • Optional Cloudflare Access API credentials if the 'Use Cloudflare Access' option is enabled.

Troubleshooting

  • Ensure Wapiti is installed and accessible in the system PATH; otherwise, the scan command will fail.
  • If using Cloudflare Access, verify that valid credentials are provided to avoid authentication errors.
  • Check that the target website URL is correctly formatted and reachable.
  • Proxy settings must be valid if a SOCKS proxy is used; otherwise, the scan may not connect properly.
  • Common errors include command execution failures, which are thrown as node operation errors with the underlying command error message.

Discussion