JS:
-
Run: git clone --depth 1 https://github.com/andresriancho/w3af.git
-
Edit Target on each script
-
run w3af_api
-
run via node
Python:
-
Run: git clone --depth 1 https://github.com/andresriancho/w3af.git
-
Make sure you have libxslt1-dev and libxml2-dev
-
Run: pip install zaproxy
-
start w3af_api from your cloned dir
-
Edit StartScan.py to hardcode site URL
-
Wait a few seconds and run GetFullScanResults.py |less Note: Scans can take a long time, so displayed results may be incomplete
-
Read the code, the important part is: for key in vuln.resource_data: print key, ": ", vuln.resource_data[key] :-)