Wapiti

Description

Wapiti is an open-source web application vulnerability scanner that performs black-box testing by crawling web pages and injecting payloads to detect vulnerabilities. It tests for SQL injection, XSS, file inclusion, command execution, SSRF, XXE, and more. Results are generated as HTML, JSON, or XML reports with remediation guidance.

Use Cases

• Black-box web application vulnerability scanning
• Detecting injection flaws without source code access
• Automated security reports for web applications

Attack Phases

MITRE ATT&CK Techniques (2)