# Scan Web Application Vulnerabilities With WAScan Tool Linux

**URL:** <https://onehack.st/t/scan-web-application-vulnerabilities-with-wascan-tool-linux/78962>\
**Category:** Tools & Scripts\
**Tags:** programming, hacking\
**Created:** [April 11, 2020, 2:05pm UTC](https://onehack.st/t/scan-web-application-vulnerabilities-with-wascan-tool-linux/78962 "2020-04-11T14:05:53Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![RoohNooh](https://onehack.st/user_avatar/onehack.st/roohnooh/32/166257_2.png) [@RoohNooh](https://onehack.st/u/RoohNooh)\
**Post date:** [April 11, 2020, 2:05pm UTC](https://onehack.st/t/scan-web-application-vulnerabilities-with-wascan-tool-linux/78962/1 "2020-04-11T14:05:53Z")

</div>

Scan websites for vulnerabilities because if you find vulnerability in your website then you can fix it and prevent your site from hackers or attackers. So if you guy’s interested then let’s get started.

[https://raw.githubusercontent.com/m4ll0k/WAScan/master/screen/screen.png](https://raw.githubusercontent.com/m4ll0k/WAScan/master/screen/screen.png)

**WAScan** (Web Application Scan) it is designed to find various vulnerabilities using " **Black-Box**" method find errors, send payloads, test script injections, etc. and test almost popular web application vulnerabilities on target domain.

## Features

**Fingerprint**

- _Content Management System (CMS)_ → **6**
- _Web Frameworks_ → **22**
- _Cookies/Headers Security_
- _Languages_ → **9**
- _Operating Systems (OS)_ → **7**
- _Server_ → **ALL**
- _Web App Firewall (WAF)_ → **50+**

**Attacks**

- _Bash Commands Injection_
- _Blind SQL Injection_
- _Buffer Overflow_
- _Carriage Return Line Feed_
- _SQL Injection in Headers_
- _XSS in Headers_
- _HTML Injection_
- _LDAP Injection_
- _Local File Inclusion_
- _OS Commanding_
- _PHP Code Injection_
- _SQL Injection_
- _Server Side Injection_
- _XPath Injection_
- _Cross Site Scripting_
- _XML External Entity_

**Audit**

- _Apache Status Page_
- _Open Redirect_
- _PHPInfo_
- _Robots.txt_
- _XST_

**Bruteforce**

- _Admin Panel_
- _Common Backdoor_
- _Common Backup Dir_
- _Common Backup File_
- _Common Dir_
- _Common File_
- _Hidden Parameters_

**Disclosure**

- _Credit Cards_
- _Emails_
- _Private IP_
- _Errors_ → ( **fatal errors** ,…)
- _SSN_

Now requirements automatically installed in your system. Once it’s show you successful message you can use it with following commands.

## Full Video Tutorial

![](https://img.youtube.com/vi/ehB9Xk-AU0Q/maxresdefault.jpg)https://www.youtube.com/embed/ehB9Xk-AU0Q?feature=oembed&wmode=opaque

[https://github.com/m4ll0k/WAScan](https://github.com/m4ll0k/WAScan)