Open-source black-box web application vulnerability scanner
Wapiti is an open-source web application vulnerability scanner that performs black-box testing by crawling web pages and injecting payloads to detect vulnerabilities. It tests for SQL injection, XSS, file inclusion, command execution, SSRF, XXE, and more. Results are generated as HTML, JSON, or XML reports with remediation guidance.