wapiti-scanner / wapiti

Web vulnerability scanner written in Python3
https://github.com/wapiti-scanner/wapiti
GNU General Public License v2.0
1.15k stars 176 forks source link

Add an option --wapp-dir to load wapp data #561

Closed Qwarctick closed 5 months ago

Qwarctick commented 6 months ago

There is an option --wapp-url that take the URL of a github repo to update wapp data. The option expects an url that leads to the raw data. Wapiti then completes this url to obtain the files. So if you use https://raw.githubusercontent.com/wapiti-scanner/wappalyzer/main as input, wapiti will download the file https://raw.githubusercontent.com/wapiti-scanner/wappalyzer/main/src/groups.json.

This works well on github because to get the raw files, all you have to do is change the root of the url. (github.com -> raw.githubusercontent.com).

But it doesn't work with gitea, where you have to add the raw parameter at the end of the url, or on private repositories, where you sometimes have to add the parameter at the end of the URL (in addition to adding the tokens).

I suggest adding a --wap-dir option that leads to a folder containing the tree structure required for the files.

Slokilla commented 5 months ago

Fixed in https://github.com/wapiti-scanner/wapiti/pull/568