Share
## https://sploitus.com/exploit?id=272F3256-70B6-5CA5-82A5-D3A1911962DE
wexploit v3.0
Advanced Web Exploitation Kit
---
## ✨ Features
| | |
|---|---|
| **41 attack modules** | Injection · API/Modern · Network/App · Config/Misc |
| **Live CVE intel** | NVD, CIRCL, CISA KEV feeds — no static DB. Auto-probes public PoCs via GitHub + CVE.org |
| **High performance** | Threaded core for dir brute-force, auth attacks, CVE scanning |
| **WAF fingerprint & bypass** | Standalone detection + automatic mutation testing |
| **Rich reporting** | JSON · CSV · Markdown · interactive HTML (filter/search/sort), auto-routed to `reports/` |
| **Cross-platform** | Windows, Linux, macOS — plus one-command standalone binary |
## 📦 Installation
One command — picks up your OS automatically.
**Linux / macOS**
```bash
./install.sh
```
**Windows (PowerShell)**
```powershell
.\install.ps1
```
Both install dependencies and expose the `wexploit` command globally. Prefer a portable binary instead? Run `python build.py` → `dist/wexploit`.
## ⚔️ Usage
```bash
wexploit [options]
wexploit all [options]
```
### Modules by category
| Category | Modules |
|---|---|
| **Injection** | `sqli` `xss` `cmdi` `lfi` `xxe` `ssti` `ssrf` `crlf` `hostheader` `xpath` `ldap` |
| **API/Modern** | `graphql` `nosql` `jwt` `prototype` `cors` `api` `js` |
| **Network/App** | `cve` `auth` `content` `crawl` `subdomain` `waf` `tls` |
| **Config/Misc** | `headers` `disclosure` `upload` `csrf` `deser` `smuggling` `clickjack` |
| **Others** | `cache` `methods` `hpp` `cookie` `log4shell` `race` `smtp` `replay` `all` |
### Examples
```bash
# Full sweep, clean CSV output, 10 threads, quiet
wexploit all http://target.com/ -o scan_result.csv --threads 10 -q
# CVE scan, cross-ref CISA KEV, pull PoCs, auto-probe
wexploit cve http://target.com/ --auto-probe --exploits
# WAF detection + payload bypass
wexploit waf http://target.com/
# API: BOLA/IDOR, mass assignment, rate limit
wexploit api http://target.com/api/v1/
# Extract secrets/endpoints from JS bundles
wexploit js http://target.com/
```
> Run `wexploit -h` for module-specific options.