andresriancho/w3af

Features

• Web Vulnerability Scanning - Executes automated security plugins to identify and exploit vulnerabilities within web applications.
• Traffic Interception Tools - Provides an intercepting HTTP proxy to capture, inspect, and modify traffic between the client and server.
• Penetration Testing Frameworks - Provides a comprehensive suite for automating the discovery and exploitation of web security weaknesses.
• Security Auditing Tools - Provides a containerized environment for running comprehensive security scans and managing vulnerability plugins.
• HTTP Traffic Analysis - Inspects and compares HTTP requests and responses and allows manual requests to test server behavior.
• Exploitation and Post-Exploitation - Executes specific exploits against vulnerabilities and manages interactive remote shells for system access.
• Traffic Interception - Acts as an intercepting proxy to capture, edit, and forward HTTP traffic between clients and servers.
• Traffic Proxying and Interception - Intercepts, modifies, and analyzes raw HTTP traffic between the client and server.
• Vulnerability Exploitation Frameworks - Includes a framework for delivering specific exploit payloads to verify vulnerabilities and gain unauthorized access.
• Web Application Exploits - Tests the viability of discovered security holes to confirm if they permit unauthorized access or data extraction.
• Web Exploitation - Launches exploit payloads against discovered web vulnerabilities to gain unauthorized access or remote shells.
• HTTP Traffic Manipulation Tools - Ships utilities for intercepting and modifying HTTP headers and payloads in real-time using regular expressions.
• Traffic Routing Proxies - Creates reverse TCP tunnels and SOCKS proxies through breached servers to route traffic into internal networks.
• Remote Shells - Provides an interactive remote shell environment to manage compromised targets and log session activity.
• API Endpoint Discovery - Extracts API endpoints and parameters by parsing OpenAPI documents or capturing traffic via an intercepting proxy.
• Custom Security Scan Extensions - Features a modular system for tuning and enabling specific security test plugins to customize scans.
• Exploit Automation Engines - Employs a curated knowledge base of vulnerability patterns to automate the selection and delivery of exploit payloads.
• Injection Point Discovery - Crawls web applications to identify URLs, forms, and other potential entry points for security injection testing.
• Post-Exploitation Frameworks - Implements tools for executing post-exploitation scripts to gather system information from compromised targets.
• REST API Auditing - Identifies and exploits security vulnerabilities in REST endpoints by analyzing their parameters and headers.
• Security Audit Plugins - Provides a modular system to select and tune auditing, bruteforcing, and evasion plugins for customized security analysis.
• Penetration Testing Suites - Ships a collection of specialized tools for automating security research and web penetration testing tasks.
• Security Testing and Auditing - Automates repeatable security audits through the use of scripted sequences and configuration profiles.
• Vulnerability Scanning - Analyzes injection points by sending crafted data to identify vulnerabilities like SQL injection.
• Automated Security Scan Triggers - Enables triggering vulnerability scans via API requests using target URLs and configuration profiles.
• Vulnerability Export APIs - Offers an API to export a list of identified vulnerabilities or detailed data for specific flaws.
• Web Security Auditing - Systematically verifies the security posture of web applications using automated crawls and audits.
• Detector-Based Plugin Architectures - Implements a modular architecture where independent security detector plugins are used to identify specific vulnerabilities.
• HTTP Fuzzing - Creates multiple HTTP requests using special syntax to expand variables into combined permutations for fuzzing.
• Site Map Generators - Recursively crawls web applications to generate a structured map of all discovered URLs.
• Penetration Testing - Supports routing traffic through compromised hosts via reverse TCP tunnels and SOCKS proxies.
• Batch Exploit Execution - Executes batches of selected exploit payloads against all compatible vulnerabilities with conditional stop options.
• URL Crawl Queues - Tracks and retrieves the list of all web addresses identified during the crawling process to verify scan coverage.
• Programmatic Scanning APIs - Provides a programmatic interface to control scanning processes and retrieve structured vulnerability intelligence.
• Audit Sequence Automation - Supports running repeatable security audits through the execution of command sequences defined in text files.
• Security Scanner GUIs - Includes a graphical interface for launching security scans and analyzing the resulting vulnerability data.
• Configuration Profiles - Saves specific plugin configurations and settings as reusable profiles to ensure consistent scan results.
• Wizard-Based Profile Generation - Provides a wizard interface to generate project configuration profiles through guided questions.
• Scan Result Exporters - Generates structured reports of identified vulnerabilities and debugging data in text, XML, and HTML formats.
• Scan Status Trackers - Enables real-time monitoring of scan progress, retrieval of execution logs, and lifecycle management.
• Scanning Configuration Profiles - Saves target URLs and plugin configurations into reusable profiles for consistent security audit results.
• Scan Configuration Profiles - Standardizes repeated security scans by defining target URLs and plugin configurations via a wizard or manual setup.
• Custom Request Headers - Allows the injection of custom HTTP headers and session cookies to satisfy application authentication requirements.
• HTTP Request Configurations - Allows definition of URL and request parameters that govern how the scanner interacts with targets.
• Pattern-Based Vulnerability Detection - Inspects HTTP requests and responses using regular expressions to identify vulnerabilities based on specific keywords.
• Reverse Proxy Tunneling Tools - Establishes reverse TCP tunnels and SOCKS proxies to route traffic through compromised hosts into internal networks.
• Site Structure Visualizers - Visualizes the crawled architecture of web applications as hierarchical trees and graphical maps.
• Automated Login Frameworks - Automates the submission of credentials and session validation to ensure scans can reach authenticated areas.
• Infrastructure Fingerprinters - Detects the operating system, HTTP daemon, and web application firewalls protecting the target infrastructure.
• Security Knowledge Bases - Provides a curated collection of vulnerability data to help users understand and remediate identified risks.
• HTTP Traffic Comparators - Identifies differences between multiple requests and responses by aligning headers and bodies side-by-side.
• Credential Bruteforcing - Attempts to guess credentials for login forms identified during the application crawling phase.
• Input Parameter Fuzzers - Generates permutations of HTTP requests to discover hidden endpoints and test input validation.
• Evasion Techniques - Provides capabilities to modify HTTP traffic to bypass security rules and intrusion detection systems.
• REST API Security - Discovers API endpoints and tests for vulnerabilities within RESTful services using custom parameters.
• Session Authentication - Maintains active user sessions using basic authentication, NTLM, or pre-defined cookies during the scanning process.
• Target System Fingerprinting - Allows specifying technical details about the target system to improve the accuracy and refinement of scans.
• Vulnerability Analysis Tools - Provides integrated tools to review and verify identified security flaws and their potential impact.
• Application Mapping - Maps complex web applications by routing manual navigation through an HTTP proxy to extract requests.
• Batch Exploit Execution - Launches several exploit payloads simultaneously against identified vulnerabilities to verify overall impact.
• Vulnerability Browsers - Offers a searchable tree structure to view and categorize discovered security issues by severity level.
• Request History Archives - Provides a searchable database of all generated HTTP interactions with flexible query syntax for historical analysis.
• Request Testing - Allows users to manually write and send custom HTTP requests with editable headers and bodies to test server behavior.
• Vulnerability Scanners - Comprehensive framework for auditing and attacking web applications.

Star history