mathis2001 / WapPassiveScan

Passive Vulnerability Scanner working with Wappalyzer API and MITRE CVE search functionnality.

WapPassiveScan

Passive Vulnerability Scanner working with Wappalyzer API and MITRE CVE search functionnality.

Prerequisites:

• requests
• BeautifulSoup
• PrettyTable
• argparse

Install:

$ git clone https://github.com/mathis2001/WapPassiveScan

$ cd WapPassiveScan

$ python3 WapPassiveScan.py

Usage:

First, You will have to create an account on https://www.wappalyzer.com/. Then, go to https://www.wappalyzer.com/apikey/ and generate a new API key. After that, all you have to do is creating a variable named 'WAPPALYZER' in your environment variables containing the key and starting using the tool like that:

./WapPassiveScan.py [-u url] [-l list of urls] [-o output file]

Options:

  -h, --help    show this help message and exit
  
  -u, --url     target a single url
  
  -l, --list    target a list of urls in a file
  
  -o, --output  output filename

Screenshots:

Capture.video.du.23-02-2023.15.57.41.webm

To Do:

• Reduce false positives