Wapiti lightweight Web security vulnerability scanning tool and wapiti scanning tool

Wapiti lightweight Web security vulnerability scanning tool and wapiti scanning tool
Wapiti is a Web application vulnerability check tool. It has a "dark box operation" scan, that is, it does not care about the source code of the Web application, but it will scan the deployment of Web pages to find scripts and formats that enable it to inject data. Wapiti is used to detect Web pages and check whether scripts are vulnerable. It is a Web application vulnerability check tool. It has a "dark box operation" scan, that is, it does not care about the source code of the Web application, but it will scan the deployment of Web pages to find scripts and formats that enable it to inject data. It is used to detect webpages and check whether scripts are fragile.
Wapiti is an open-source security testing tool for Web application vulnerability scanning and Security Detection. You can download it at http://sourceforge.net/projects/wapiti.

Development language: Python
Home: http://www.ict-romulus.eu/web/wapiti/home
: Http://sourceforge.net/projects/wapiti/

Wapiti is a script written in Python. to use it, you must install Python first.

Wapiti performs a Black Box scan, that is, scanning the webpage directly without scanning the source code of the Web application. Wapiti scans web scripts and forms to find the places where data can be injected. Wapiti can detect the following vulnerabilities:

Functions and features
File processing error (local and remote file opening, readfile ...)
Database injection (PHP/JSP/ASP, SQL and XPath injection)
XSS (Cross-Site Scripting) Injection
LDAP Injection
Command Execution detection (eval (), system (), passtru ()...)
CRLF Injection (HTTP response, fixed session ...)
Vulnerability count
Details of successful attacks
Vulnerability details
Solutions to vulnerabilities
HTML report format
XML Report Format

The reason why Wapiti is called Lightweight is that its security detection process does not need to rely on the Vulnerability Database, so the execution speed is faster.
Wapiti gave me the feeling of "What a pity !" Is a fully functional Web application, if there is a security vulnerability, it is really "What a pity !"