lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CAKS6U3s3U5_ruTUOH1H3XJQ98R2ki_-1ugeYg8HMJVkYLY+AbQ@mail.gmail.com>
Date: Sun, 7 Jan 2018 14:48:26 +0100
From: Nicolas SURRIBAS <nicolas.surribas@...il.com>
To: fulldisclosure@...lists.org
Subject: [FD] Wapiti 3.0.0 released! Web vulnerability scanner

Dear full-disclosure list,


I'm happy to announce that Wapiti 3.0.0 is now available for download.


This new release now relies on Python 3.

The majority of improvements were made to give you more control over
Wapiti's execution.

A session mechanism using sqlite3 allows you to stop the scan or/and
attacks and resume them later.

The new behavior, when you stop Wapiti during the attack process (with
Ctrl+C), is to let you choose between continuing, moving to the next
attack-module, exiting with or without generating the vulnerability report.

A total of nine options can now help you to finely control the scanner by
fixing the maximum allowed depth of crawling, skipping parameter names of
your choice in URLs and forms, setting the maximum delay for scanning,
choosing between 6 modes of scan force, and more !

The SOCKS5 proxy support is also back in this release.

Improvements have been made to existing attack modules. For example by
reducing false-positives for the blind sqli attack module.

Two new attack modules were added : buster (for directory/filename brute
forcing) and shellshock (not really new but here it is).

To users of previous versions : some options changed. The base URL must now
be given through the -u option.

More details on options can ge found in the manpage :

http://wapiti.sourceforge.net/wapiti.1.html


Requirements and installation procedure are described in the INSTALL file :

https://sourceforge.net/p/wapiti/code/HEAD/tree/trunk/INSTALL.md

Three video tutorials were made to show installation on Ubuntu/Kali,
openSUSE and Windows.


I hope you will enjoy this new release. Make Wapiti great again !

http://wapiti.sourceforge.net/

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists