w3af: 源于git https://github.com/andresriancho/w3af.git web安全测试框架它由python写成，可以提供一个高效且针对web应用的渗透测试平台可检测出超过200种web应用安全问题： SQL盲注缓存溢出多重跨域资源共享的错误配置不安全的DAV配置 CSRF漏洞及其他 W3af拥有用户交互界面和控制台界面，方便用户理解。他还支持用户使用认证模块验证网站

## w3af - Web Application Attack and Audit Framework

[w3af](http://w3af.org/) is an [open source](https://www.gnu.org/licenses/gpl-2.0.txt)
web application security scanner which helps developers and penetration testers
identify and exploit vulnerabilities in their web applications.

The scanner is able to identify [200+ vulnerabilities](https://github.com/andresriancho/w3af/blob/master/w3af/core/data/constants/vulns.py),
including [Cross-Site Scripting](https://github.com/andresriancho/w3af/blob/master/w3af/plugins/audit/xss.py),
[SQL injection](https://github.com/andresriancho/w3af/blob/master/w3af/plugins/audit/sqli.py) and
[OS commanding](https://github.com/andresriancho/w3af/blob/master/w3af/plugins/audit/os_commanding.py).

## Contributing

Pull requests are always welcome! If you're not sure where to start, please take
a look at the [First steps as a contributor](https://github.com/andresriancho/w3af/wiki/First-steps-as-a-contributor)
document in our wiki. All contributions, no matter how small, are welcome.

## Links and documentation
 * [w3af's main site](http://w3af.org/)
 * [Project documentation](http://docs.w3af.org/en/latest/)

## Sponsors

[Holm Security](https://www.holmsecurity.com/) sponsors the project and uses [w3af](http://w3af.org/)
as part of their amazing [automated and continuous vulnerability assessment platform](https://www.holmsecurity.com/vulnerability-assessment).

Found this project useful? Donations are accepted via [ethereum](https://www.ethereum.org/) at `0xb1B56F04E6cc5F4ACcB19678959800824DA8DE82`

龍dz/w3af

简介

发行版

贡献者

近期动态

龍dz/w3af .gitee-modal { width: 500px !important; }

简介

发行版

贡献者

近期动态

搜索帮助

龍dz/w3af