search

wapiti-scanner / wapiti

Web vulnerability scanner written in Python3
https://github.com/wapiti-scanner/wapiti
GNU General Public License v2.0
1.15k stars 176 forks source link

is wapiti can only use for get or post(x-www-form-urlencoded) request? #599

Closed weiyaojun1992 closed 3 weeks ago

weiyaojun1992 commented 2 months ago

I'm a QA, now I plan to use wapiti3 for my project， but when I debug and test wapiti3 I find it can only be useful for get or post（Content-Type=application/x-www-form-urlencoded）,and is wapiti can only use for coding by php program? I use wapiti -u http://domain ,there is on www.domain.com request record on my proxy，scan nothing

bretfourbe commented 2 months ago

Hi @weiyaojun1992, You can use it for JSON body, but you will need to provide a swagger file of the API (using --swagger) or to use the headless mode (--headless).