[Tutorial] How to use WMAP - Printable Version

[Tutorial] How to use WMAP - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Sharing (https://sinister.li/Forum-Sharing)
+--- Forum: eBooks (https://sinister.li/Forum-eBooks)
+--- Thread: [Tutorial] How to use WMAP (/Thread-Tutorial-How-to-use-WMAP)

[Tutorial] How to use WMAP - 0x4b33 - 09-13-2013

Note:
Didnt see any other section to place this tutorial, so please move it if their is a other section for this.

Quick note: I wrote this for the OS I use and that is Kali linux.
You can download it for free here:

http://www.kali.org/downloads/

WMAP information:

WMAP is a web vulnerability scanner that was created from SQLMap.
WMAP is integrated with Metasploit and allow us to scan from within the Framework.

Lets add a new target URL by typing -a after "wmap_sites", example can be seen below.

Code:
wmap_sites -a http://127.0.0.1

We will now add the site as our target, example can be seen below.

Code:
wmap_targets -t http://127.0.0.1/index.php

you can also see the usage of wmap_targets by typing wmap_targets -h.

Code:
[*] Usage: wmap_targets [options]
	-h 		Display this help text
	-t [urls]	Define target sites (vhost1,url[space]vhost2,url) 
	-d [ids]	Define target sites (id1, id2, id3 ...)
	-c 		Clean target sites list
	-l  		List all target sites

Lets get back to the point, once we added wm_targets, we can view our targets via console by typing -l into our console.

Code:
msf > wmap_targets -l
[*] Defined targets
==

  Id  Vhost  Host    Port  SSL    Path
  --  --  ----    ----  ---    ----
  0   127.0.0.1    127.0.0.1  80    false	/index.php

We can now target the system. When using the syntax "wmap_run" we scan the target. You can see the usage of wmap_run below inside the code field.

Code:
msf > wmap_run -h
[*] Usage: wmap_run [options]
	-h    Display this help text
	-t    Show all enabled modules
	-m [regex]    Launch only modules that name match provided regex.
	-p [regex]    Only test path defined by regex.
	-e [/path/to/profile]  Launch profile modules against all matched targets.
	    (No profile file runs all enabled modules.)

Lets start scanning our target, by adding -t to the back of wmap_run as you can see below.

Code:
wmap_run -t

Now we just need to actually run the scan against our target URL and we will do that by typing "wmap_run" into the console and add -e to the back of "wmap_run" as you can see below.

Code:
wmap_run -e

When our scan is done executing we will look after something of interesting.
Now to finish off, type in "wmap_vulns -l" into console, as seen below.

Code:
wmap_vulns -l

Hopefully when you are looking at the above output you see a wmap report on a vulnerability.
If you got some difficulties, you can always type in "vulns" into the console and it will list the details for you, a example of this can be seen below.

Code:
msf > vulns
[*] Bla bla....