w3af
Sign in to savew3af (Web Application Attack and Audit Framework) is an open-source web application security scanner. The project provides a vulnerability scanner and exploitation tool for Web applications. It provides information about security vulnerabilities for use in penetration testing engagements. The scanner offers a graphical user interface and a command-line interface.
Source code
w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site Scripting, SQL injection and OS commanding. Pull requests are always welcome! If you're not sure where to start, please take a look at the First steps as a contributor document in our wiki. All contributions, no matter how small, are welcome. Holm Security sponsors the project and uses w3af as part of their amazing automated and continuous vulnerability assessment platform.
Excerpt from the source-code README · 1,558 chars · not written by Vinony
Wikidata facts
- Official website
- www.w3af.org
- Image
- W3af-screenshot.png
Show 2 more facts
- source code repository URL
- github.com/andresriancho/w3af
- software version identifier
- 1.6.54
via Wikidata · CC0
~2 min read
Article
5 sectionsContents
- Architecture
- History
- See also
- References
- External links
w3af (Web Application Attack and Audit Framework) is an open-source web application security scanner. The project provides a vulnerability scanner and exploitation tool for Web applications. It provides information about security vulnerabilities for use in penetration testing engagements. The scanner offers a graphical user interface and a command-line interface.
A fork has been made by the original authors under the name w4af, originally in an attempt to upgrade the code base to use Python 3 instead of Python 2.