[0x4b33]

Note:
Didnt see any other section to place this tutorial, so please move it if their is a other section for this.


Quick note: I wrote this for the OS I use and that is Kali linux.
You can download it for free here:

• http://www.kali.org/downloads/
  

WMAP information:

• WMAP is a web vulnerability scanner that was created from SQLMap.
  
• WMAP is integrated with Metasploit and allow us to scan from within the Framework.
  

Lets add a new target URL by typing -a after "wmap_sites", example can be seen below.

Code:

wmap_sites -a http://127.0.0.1

We will now add the site as our target, example can be seen below.

Code:

wmap_targets -t http://127.0.0.1/index.php

you can also see the usage of wmap_targets by typing wmap_targets -h.

Code:

[*] Usage: wmap_targets [options] -h Display this help text -t [urls] Define target sites (vhost1,url[space]vhost2,url) -d [ids] Define target sites (id1, id2, id3 ...) -c Clean target sites list -l List all target sites

Lets get back to the point, once we added wm_targets, we can view our targets via console by typing -l into our console.

Code:

msf > wmap_targets -l [*] Defined targets == Id Vhost Host Port SSL Path -- -- ---- ---- --- ---- 0 127.0.0.1 127.0.0.1 80 false /index.php

We can now target the system. When using the syntax "wmap_run" we scan the target. You can see the usage of wmap_run below inside the code field.

Code:

msf > wmap_run -h [*] Usage: wmap_run [options] -h Display this help text -t Show all enabled modules -m [regex] Launch only modules that name match provided regex. -p [regex] Only test path defined by regex. -e [/path/to/profile] Launch profile modules against all matched targets. (No profile file runs all enabled modules.)

Lets start scanning our target, by adding -t to the back of wmap_run as you can see below.

Code:

wmap_run -t

Now we just need to actually run the scan against our target URL and we will do that by typing "wmap_run" into the console and add -e to the back of "wmap_run" as you can see below.

Code:

wmap_run -e

When our scan is done executing we will look after something of interesting.
Now to finish off, type in "wmap_vulns -l" into console, as seen below.

Code:

wmap_vulns -l

Hopefully when you are looking at the above output you see a wmap report on a vulnerability.
If you got some difficulties, you can always type in "vulns" into the console and it will list the details for you, a example of this can be seen below.

Code:

msf > vulns [*] Bla bla....