wascan

WAScan ((W)eb (A)pplication (Scan)ner) is a Open Source web application security scanner. It is designed to find various vulnerabilities using black-box method, that means it won’t study the source code of web applications but will work like a fuzzer, scanning the pages of the deployed web application, extracting links and forms and attacking the scripts, sending payloads and looking for error messages,..etc.

Name:wascan

Category:Scanners

Publisher:trickest

Created:6/23/2021

Container:quay.io/trickest/wascan:cf2f61d

Output Type:

License:Unknown

Source:View Source

Parameters

auth · string

-aHTTP Basic Authentication (user:pass)

data · string

-dData to be sent via POST method

host · string

-hHTTP Host header value

proxy · string

-pUse a proxy, (host:port)

cookie · string

-cHTTP Cookie header value

headers · string

-HExtra Headers (e.g: Host:site.com)

referer · string

-RHTTP Referer header value

timeout · string

-tSeconds to wait before timeout connection

redirect · string

-nSet redirect target URL False (default=True)

bruteforce · boolean

-bBruteforce hidden parameters

proxy-auth · string

-PProxy Authentication, (user:pass)

target-url · string · required

-uTarget URL

user-agent · string

-AHTTP User-agent header value

http-method · string

-mHTTP method, GET or POST

scan-option · string · required

-sChoose scan option: 0 - Fingerprint, 1 - Attacks, 2 - Audit, 3 - Bruteforce, 4 - Disclosure, 5 - Full scan

random-agent · boolean

-rUse random User-agent header value