WMAP: web app scanning inside Metasploit

WMAP is a Metasploit plugin, so scan results land directly in the same database as everything else you’ve enumerated. It’s useful when you want web findings sitting alongside host/service data rather than in a separate report.

Setup

load wmap                              # load the plugin

wmap_sites -a <target_ip>              # register a new site
wmap_targets -t http://<target_ip>     # set the specific target URL
wmap_sites -l                          # confirm the site was added
wmap_targets -l                        # confirm the target was added

Run and review

wmap_run -t                            # dry run: show which modules WILL run against this target
wmap_run -e                            # execute: run all enabled/applicable modules

wmap_vulns -l                          # list everything WMAP found

Web server & HTTP enumeration: manual enumeration to pair with the scan
From service version to working exploit: WMAP in the exploit-search workflow
Metasploit Framework: database and workspace basics
Nessus: broader CVE-tagged scanner

Setup

Run and review

Related