wapt

A cross-platform python based utility for information gathering and penetration testing automation!

This is a tool used by several security researchers to find Open Redirect Bug

WordPress WPS Hide Login <1.9.1 - Information Disclosure

CVE-2020-27838 - KeyCloak - Information Exposure

WordPress Contact Form 7 - Unrestricted File Upload

Apache Superset - Authentication Bypass

Windows Server 2003 & IIS 6.0 - Remote Code Execution

PADIT (Pack And Deploy) is a community-maintained software deployment and lifecycle management solution for Windows environments, derived from WAPT Community 1.8.2 and progressively modernized for current systems.

Plesk Obsidian <=18.0.49 - Open Redirect

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

SpiderFlow Crawler Platform - Remote Code Execution

Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.

PaperCut NG Unauthenticated XMLRPC Functionality

Windows Advanced Package Tool

Likeshop < 2.5.7.20210311 - Arbitrary File Upload