Wapiti can detect the following vulnerabilities :
- File Handling Errors (Local and remote include/require, fopen, readfile…)
- Database Injection (PHP/JSP/ASP SQL Injections and XPath Injections)
- XSS (Cross Site Scripting) Injection
- LDAP Injection
- Command Execution detection (eval(), system(), passtru()…)
- CRLF Injection (HTTP Response Splitting, session fixation…)
Download:
http://sourceforge.net/projects/wapiti/ (Orginal von der Page)
Grüsse
Dr. Sp!c
Homepage: http://wapiti.sourceforge.net/