Home

Welcome to the wXf wiki!

Project description:

The basic principle behind wXf is to collect and place into a framework, all of the various scripts that web security testers create on a per-engagement scenario. The most important part of the framework is allowing user feedback to determine the direction of the code.

The wiki will cover important details such as installation, usage, module development and general troubleshooting guide.

Thank you for downloading, contributing and please provide any feedback you can.

Get started here: Getting Started

Learn to use wXf here: Using the Framework

Cheers,

wXf Developers

Other Relevant links:

Development

• Learn to create an auxiliary module

  Creating an Auxiliary Module

• Coming Soon, Learn to create an exploit module

  Creating an Exploit Module

• Understand assist modules (required to write a module)

  Assists Modules

• Log output of the results of a module you written using our logger options

  Module Logger

  Dradis Logger

• Coming soon, the wiki will explain exploits/payloads stored in sqlite3!

  Creating DB Based Exploits

  Creating DB Based Payloads

Module Pages

auxiliary/enum/dirchex

auxiliary/fuzzers/dir_trav_fuzz

auxiliary/enum/joinme

auxiliary/enum/soap_request

auxiliary/enum/user_agent_test

auxiliary/enum/wsdl_action_enum

Database Exploits

rfi/php/zencart1

rfi/php/fss1

xss/custom1

Database Payloads

php/cmd_single

xss/beef

xss/alert_from_file

xss/alert_from_script

User Troubleshooting Guides

• Installing on BT4 by Jeff Murri Backtrack 4 Installation

Contact

• Information on contacting a wXf core developer

  Contact Us