How to Install and Uninstall wapiti Package on Kali Linux

Last updated: May 17,2024

1. Install "wapiti" package

In this section, we are going to explain the necessary steps to install wapiti on Kali Linux


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                wapiti
            
                    
    
    Copied

2. Uninstall "wapiti" package

In this section, we are going to explain the necessary steps to uninstall wapiti on Kali Linux:


    
        
            $
        

        
            
                sudo apt remove
            
                        
                wapiti
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the wapiti package on Kali Linux

Package: wapiti
Version: 3.0.4+dfsg-2
Installed-Size: 1580
Maintainer: Debian Security Tools
Architecture: all
Depends: libjs-jquery, python3-bs4 (>= 4.9.3), python3-importlib-metadata, python3-mako (>= 1.1.2), python3-markupsafe, python3-requests, python3-six (>= 1.15.0), python3-socks, python3-tld, python3-yaswfp, python3:any
Size: 337896
SHA256: 63daeecf9b8c5674579efd1229621055ed52a5833203b5cd7be7fc0d56ba24bd
SHA1: c8de6119675f457677e08db06c28639a2d08e8a7
MD5sum: ad213a43facce958c05840d71b46aec0
Description: web application vulnerability scanner
Wapiti allows you to audit the security of your web applications.
It performs "black-box" scans, i.e. it does not study the source code of the
application but will scan the web pages of the deployed web applications,
looking for scripts and forms where it can inject data.
Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see
if a script is vulnerable.
.
Wapiti can detect the following vulnerabilities:
- Database Injection (PHP/ASP/JSP SQL Injections and XPath Injections)
- Cross Site Scripting (XSS) reflected and permanent
- File disclosure detection (local and remote include, require, fopen,
readfile...)
- Command Execution detection (eval(), system(), passtru()...)
- XXE (Xml eXternal Entity) injection
- CRLF Injection
- Search for potentially dangerous files on the server (thank to the Nikto db)
- Bypass of weak htaccess configurations
- Search for copies (backup) of scripts on the server
- Shellshock
- DirBuster like
- Server Side Request Forgery (through use of an external Wapiti website)
Description-md5:
Homepage: https://wapiti.sourceforge.net/
Tag: implemented-in::python, role::program, security::TODO, use::analysing
Section: python
Priority: optional
Filename: pool/main/w/wapiti/wapiti_3.0.4+dfsg-2_all.deb