Skip to content

Commit 71b535c

Browse files
author
devloop
committed
Updated INSTALL and README (added steps for Windows installation of
requirements) Updated example.txt as I remove .py extension on scripts. Updated make_exe.py to add icons to scripts + added icons to the svn.
1 parent 821dae3 commit 71b535c

File tree

6 files changed

+65
-12
lines changed

6 files changed

+65
-12
lines changed

INSTALL

+41-3
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,41 @@
1-
No installation procedure is available for the moment.
2-
Just extract the archive and launch Wapiti with
3-
python wapiti.py
1+
Wapiti installation
2+
===================
3+
4+
You do not have to "install" the software on your system to make it work.
5+
If you have all the requirements on your system, just extract the tarball and launch the "wapiti" command line in
6+
the "bin" folder :
7+
./bin/wapiti (when you are in the extracted tarball)
8+
or
9+
python bin/wapiti (if your system can't execute the script directly)
10+
11+
12+
Installation on Unix-like systems
13+
=================================
14+
15+
If you really want to install Wapiti on your system, launch the setup.py script with the following command :
16+
python setup.py install
17+
It will copy the wapiti libraries (wapitiCore) in your Python installation and place the executables in a "bin" system
18+
directory (eg: /usr/local/bin).
19+
20+
21+
Using Wapiti on Windows systems
22+
===============================
23+
24+
If you don't want to install all the requirements to use Wapiti on Windows you should look for a standalone package
25+
made with py2exe (see the available downloads on SourceForge).
26+
Then, just download and extract the zip archive and launch wapiti.exe from the Windows command line.
27+
28+
29+
Installing Wapiti requirements on Windows
30+
=========================================
31+
32+
You can't install Wapiti on a Windows system but if (for some reasons) you really want to install all the
33+
requirements then :
34+
35+
* Download a Python 2.7.5 (or more recent) installer for your platform from http://python.org/download/
36+
* Install it and change the PATH environment variable to append the Python path
37+
* Download a requests archive from http://docs.python-requests.org/en/latest/user/install/
38+
* Extract the archive and call the setup.py script from the archive with "python setup.py install"
39+
* Download BeautifulSoup 3 from http://www.crummy.com/software/BeautifulSoup/
40+
* Extract the archive and call the setup.py script from the archive with "python setup.py install"
41+

README

+11-2
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ Browsing features
4444
+ Safeguards against scan endless-loops (max number of values for a parameter)
4545
+ Possibility to set the first URLs to explore (even if not in scope)
4646
+ Can exclude some URLs of the scan and attacks (eg: logout URL)
47-
+ Import of cookies (get them with the cookie.py and getcookie.py tools)
47+
+ Import of cookies (get them with the wapiti-cookie and wapiti-getcookie tools)
4848
+ Can activate / deactivate SSL certificates verification
4949
+ Extract URLs from Flash SWF files
5050
+ Try to extract URLs from javascript (very basic JS interpreter)
@@ -178,12 +178,14 @@ Source code structure (wapitiCore directory)
178178
| `-- language.py
179179
|
180180
|-- language_sources
181+
| |-- de.po
181182
| |-- en.po
182183
| |-- es.po
183184
| |-- file_list.txt
184185
| |-- fr.po
185186
| |-- generateSources.sh # Script to generate .po files from source code
186-
| `-- generateTranslations.sh # Script to compile .po files to .mo files
187+
| |-- generateTranslations.sh # Script to compile .po files to .mo files
188+
| `-- ms.po
187189
|
188190
|-- net
189191
| |-- HTTP.py # Wrapper around python-requests, contains HTTP,
@@ -221,3 +223,10 @@ Source code structure (wapitiCore directory)
221223
|-- kube.buttons.js
222224
`-- kube.tabs.js
223225

226+
227+
Licensing
228+
=========
229+
230+
Wapiti is released under the GNU General Public License version 2 (the GPL).
231+
Source code is available on SourceForge :
232+
https://sourceforge.net/projects/wapiti/

doc/cookie.ico

361 KB
Binary file not shown.

doc/example.txt

+4-4
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
1-
First, I use wapiti-getcookie.py to login in the restricted area and get the cookie in cookies.json :
1+
First, I use wapiti-getcookie to login in the restricted area and get the cookie in cookies.json :
22

3-
bash-4.2$ python bin/wapiti-getcookie.py /tmp/cookies.json http://127.0.0.1/vuln/login.php
3+
bash-4.2$ python bin/wapiti-getcookie /tmp/cookies.json http://127.0.0.1/vuln/login.php
44
<Cookie PHPSESSID=OLPNLIEBPEFELBIFGMKJEKOD for 127.0.0.1/>
55
Please enter values for the following form:
66
url = http://127.0.0.1/vuln/login.php
77
username (default) : admin
88
password (letmein) : secret
99
<Cookie PHPSESSID=OLPNLIEBPEFELBIFGMKJEKOD for 127.0.0.1/>
1010

11-
It can also be done with wapiti-cookie.py this way :
12-
python bin/wapiti-cookie.py /tmp/cookies.json http://127.0.0.1/vuln/login.php username=admin password=secret
11+
It can also be done with wapiti-cookie this way :
12+
python bin/wapiti-cookie /tmp/cookies.json http://127.0.0.1/vuln/login.php username=admin password=secret
1313

1414
Then, I scan the vulnerable website using the cookie and excluding the logout script :
1515

doc/wapiti.ico

345 KB
Binary file not shown.

make_exe.py

+9-3
Original file line numberDiff line numberDiff line change
@@ -66,10 +66,16 @@ def build_file_list(results, dest, root, src=""):
6666
console=[
6767
{
6868
"script": "bin/wapiti",
69-
"icon_resources": [(1, "wapiti.ico")]
69+
"icon_resources": [(1, "doc/wapiti.ico")]
7070
},
71-
"bin/wapiti-cookie",
72-
"bin/wapiti-getcookie"
71+
{
72+
"script": "bin/wapiti-cookie",
73+
"icon_resources": [(1, "doc/cookie.ico")]
74+
},
75+
{
76+
"script": "bin/wapiti-getcookie",
77+
"icon_resources": [(1, "doc/cookie.ico")]
78+
}
7379
],
7480
classifiers=[
7581
'Development Status :: 5 - Production/Stable',

0 commit comments

Comments
 (0)