Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Kubit Reviews & Ratings
    29 Ratings
    Company Website
  • Astra Pentest Reviews & Ratings
    173 Ratings
    Company Website
  • Criminal IP Reviews & Ratings
    11 Ratings
    Company Website
  • Highcharts Reviews & Ratings
    111 Ratings
    Company Website
  • Embark Campus Reviews & Ratings
    34 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    71 Ratings
    Company Website
  • Nutrient SDK Reviews & Ratings
    89 Ratings
    Company Website
  • Ninox Reviews & Ratings
    541 Ratings
    Company Website
  • RAD PDF Reviews & Ratings
    3 Ratings
    Company Website
  • NeoLoad Reviews & Ratings
    360 Ratings
    Company Website

What is Wapiti?

Wapiti is a specialized tool aimed at scanning for security vulnerabilities within web applications. It effectively evaluates the security posture of both websites and web applications without needing to access the source code, conducting "black-box" scans that focus on navigating through the deployed application's web pages to identify potentially vulnerable scripts and forms subject to data injection. By creating a comprehensive list of URLs, forms, and their respective inputs, Wapiti operates like a fuzzer, inserting various payloads to probe for vulnerabilities in scripts and also seeks out files on the server that might present security risks. The tool is adaptable, facilitating attacks through both GET and POST HTTP methods, while also managing multipart forms and allowing for payload injection into uploaded filenames. Alerts are generated when Wapiti identifies unusual occurrences, such as server errors or timeouts, which could indicate a security issue. Furthermore, Wapiti distinguishes between permanent and reflected XSS vulnerabilities, offering users detailed reports on identified vulnerabilities which can be exported in various formats, including HTML, XML, JSON, TXT, and CSV. This extensive functionality makes Wapiti a robust and comprehensive solution for conducting thorough web application security assessments. Additionally, its user-friendly interface allows security professionals to streamline their vulnerability management process effectively.

What is Google ClusterFuzz?

ClusterFuzz is a comprehensive fuzzing framework aimed at identifying security weaknesses and stability issues within software applications. Used extensively by Google, it serves as the testing backbone for all its products and functions as the fuzzing engine for OSS-Fuzz. This powerful infrastructure comes equipped with numerous features that enable the seamless integration of fuzzing into the software development process. It offers fully automated procedures for filing bugs, triaging them, and resolving issues across various issue tracking platforms. Supporting multiple coverage-guided fuzzing engines, it enhances outcomes through ensemble fuzzing and a range of fuzzing techniques. Moreover, the system provides statistical data to evaluate the effectiveness of fuzzers and track the frequency of crashes. Users benefit from a user-friendly web interface that streamlines the management of fuzzing tasks and crash analysis. ClusterFuzz also accommodates various authentication methods via Firebase, and it boasts functionalities for black-box fuzzing, reducing test cases, and pinpointing regressions through bisection. In conclusion, this powerful tool not only elevates software quality and security but also becomes an essential asset for developers aiming to refine their applications, ultimately leading to more robust and reliable software solutions.

Media

Media

Integrations Supported

Drupal
Firebase
Google Chrome
Google Sheets
HTML
Honggfuzz
JSON
Jira
LibFuzzer
Microsoft Excel
Mozilla Firefox
SQL
WordPress
XML
american fuzzy lop

Integrations Supported

Drupal
Firebase
Google Chrome
Google Sheets
HTML
Honggfuzz
JSON
Jira
LibFuzzer
Microsoft Excel
Mozilla Firefox
SQL
WordPress
XML
american fuzzy lop

API Availability

Has API

API Availability

Has API

Pricing Information

Free
Free Trial Offered?
Free Version

Pricing Information

Free
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

Wapiti

Company Website

wapiti-scanner.github.io

Company Facts

Organization Name

Google

Company Website

github.com/google/clusterfuzz

Categories and Features

Categories and Features

Popular Alternatives

Popular Alternatives

ClusterFuzz Reviews & Ratings

ClusterFuzz

Google
API Fuzzer Reviews & Ratings

API Fuzzer

Fuzzapi
go-fuzz Reviews & Ratings

go-fuzz

dvyukov
Peach Fuzzer Reviews & Ratings

Peach Fuzzer

Peach Tech