我想用Wapiti扫描仪测试我们的Web应用程序.在我的场景中,我假设攻击者是经过身份验证的用户.如何配置Wapiti在我们的登录表单上使用特定的用户名和密码,以便我可以测试它背后的页面？
注意:这不是基于http或域的身份验证.
我的问题是每当我发出命令时wapiti它都会给我这条消息：
root@ kali: ~#wapiti
Wapiti - 2.3.0(wapiti.sourceforge.net)
Error: You have an outdated version of python - requests.Please upgrade
我已经将其升级到最新版本：
root@kali:~# apt-get install python-requests
Reading package lists... Done
Building dependency tree
Reading state information... Done
python-requests is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@kali:~# apt-get install wapiti
Reading package lists... Done
Building dependency tree
Reading state information... Done
wapiti is already the newest version.
0 upgraded, 0 newly installed, …