Web Application Attack and Audit Framework
1.0K
The official website and docker image for w3af is available at http://w3af.org/
$ docker pull sindicatoesp/w3af
The example scripts are available at /home/root/w3af/scripts/, read the official documentation at http://docs.w3af.org/en/latest/
$host> docker run -dit -v [HOST PATH]:/home/root/w3af/shared sindicatoesp/w3af /bin/bash
$host> docker exec -it [CONTAINER ID/NAME] ./w3af_console -s ./shared/script.w3af
$host> docker run -it -v [HOST PATH]:/home/root/w3af/shared sindicatoesp/w3af /bin/bash
$container> ./w3af_console -s ./shared/script.w3af
$host> docker run -it -v [HOST PATH]:/home/root/w3af/shared sindicatoesp/w3af /bin/bash ./w3af_console -s ./shared/script.w3af
plugins
audit xss, sqli
audit
back
profiles
use fast_scan
back
plugins
output console, html_file
output config html_file
set output_file /home/root/w3af/report.html
set verbose False
back
output config console
set verbose False
back
back
target
set target https://change.this/to/target/website
back
cleanup
start
exit
Content type
Image
Digest
Size
474.8 MB
Last updated
about 7 years ago
docker pull sindicatoesp/w3af