Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Wapiti is a tool designed for scanning vulnerabilities in web applications. It provides the capability to assess the security of both websites and web applications effectively. By conducting "black-box" scans, it avoids delving into the source code and instead focuses on crawling through the web pages of the deployed application, identifying scripts and forms that could be susceptible to data injection. After compiling a list of URLs, forms, and their associated inputs, Wapiti simulates a fuzzer by inserting various payloads to check for potential vulnerabilities in scripts. It also searches for files on the server that may pose risks. Wapiti is versatile, supporting attacks via both GET and POST HTTP methods, and handling multipart forms while being able to inject payloads into uploaded filenames. The tool raises alerts when it detects anomalies, such as server errors or timeouts. Moreover, Wapiti differentiates between permanent and reflected XSS vulnerabilities, providing users with detailed vulnerability reports that can be exported in multiple formats including HTML, XML, JSON, TXT, and CSV. This functionality makes Wapiti a comprehensive solution for web application security assessments.
Description
DefenseCode WebScanner serves as a Dynamic Application Security Testing (DAST) tool, specializing in thorough security evaluations of active websites. By simulating a multitude of attacks using sophisticated methods akin to those employed by actual hackers, WebScanner effectively assesses a website's defenses. This versatile tool is compatible with any web application development platform and can function even when the source code of the application is inaccessible. It accommodates a variety of prevalent web technologies like HTML, HTML5, Web 2.0, AJAX/jQuery, JavaScript, and Flash. With the capability to perform over 5,000 tests for Common Vulnerabilities and Exposures, WebScanner identifies more than 60 distinct types of vulnerabilities, including SQL Injection, Cross Site Scripting, and Path Traversal, as well as those outlined in the OWASP Top 10. Additionally, it is an essential resource for organizations seeking to enhance their web application security posture.
API Access
Has API
API Access
Has API
Integrations
Drupal
Google Chrome
Google Sheets
HTML
JSON
Microsoft Excel
Mozilla Firefox
SQL
WordPress
XML
Integrations
Drupal
Google Chrome
Google Sheets
HTML
JSON
Microsoft Excel
Mozilla Firefox
SQL
WordPress
XML
Pricing Details
Free
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Wapiti
Website
wapiti-scanner.github.io
Vendor Details
Company Name
DefenseCode
Founded
2010
Country
United States
Website
www.defensecode.com/web-security-scanner-dast/
Product Features
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation