Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Wapiti is a tool designed for scanning vulnerabilities in web applications. It provides the capability to assess the security of both websites and web applications effectively. By conducting "black-box" scans, it avoids delving into the source code and instead focuses on crawling through the web pages of the deployed application, identifying scripts and forms that could be susceptible to data injection. After compiling a list of URLs, forms, and their associated inputs, Wapiti simulates a fuzzer by inserting various payloads to check for potential vulnerabilities in scripts. It also searches for files on the server that may pose risks. Wapiti is versatile, supporting attacks via both GET and POST HTTP methods, and handling multipart forms while being able to inject payloads into uploaded filenames. The tool raises alerts when it detects anomalies, such as server errors or timeouts. Moreover, Wapiti differentiates between permanent and reflected XSS vulnerabilities, providing users with detailed vulnerability reports that can be exported in multiple formats including HTML, XML, JSON, TXT, and CSV. This functionality makes Wapiti a comprehensive solution for web application security assessments.

Description

WebReaver is a sophisticated and user-friendly automated tool designed for web application security testing, compatible with Mac, Windows, and Linux, making it ideal for both beginners and experienced users. This tool enables you to efficiently evaluate any web application for a wide array of vulnerabilities, ranging from critical issues like SQL Injection and command Injection to less severe concerns, including session management flaws and information leakage. It is important to note that automated testing methods, which often involve scanning and fuzzing by sending potentially harmful data, can pose significant risks to the web applications they assess. Consequently, it is advisable to limit the use of such automated tests to environments that are designated for demonstration, testing, or pre-production to prevent unintended damage. Additionally, WebReaver's versatility allows it to adapt to various testing scenarios, ensuring comprehensive coverage of potential security weaknesses.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Drupal
Google Chrome
Google Sheets
HTML
JSON
Microsoft Excel
Mozilla Firefox
SQL
WordPress
XML

Integrations

Drupal
Google Chrome
Google Sheets
HTML
JSON
Microsoft Excel
Mozilla Firefox
SQL
WordPress
XML

Pricing Details

Free
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Wapiti

Website

wapiti-scanner.github.io

Vendor Details

Company Name

Websecurify

Founded

2012

Country

United Kingdom

Website

webreaver.com

Product Features

Product Features

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Alternatives

Alternatives

API Fuzzer Reviews

API Fuzzer

Fuzzapi
Vega Reviews

Vega

Subgraph
API Fuzzer Reviews

API Fuzzer

Fuzzapi