WebPeas is the Web verstion of linpeas for web-pentesting, that provides an overview of various aspects of a web application, including:
- CMS detection
- Endpoint enumeration with probing live urls
- CMS Scanning
- Subdomain enumeration with filtring HTTP and HTTPS
- Vulnerability scanning using nuclei
- Wayback scanning
- S3 bucket scanning
- GraphQL Discovery
git clone https://github.com/UncleJ4ck/WebPeas
cd WebPeas
pip install -r requirements.txt
chmod +x ./auto.sh
docker build -t webpeas:latest .
docker run --name peas webpeas
- adding smart contract checking
- adding a dockerfile
- Fixing bugs
To use WebPeas, run the ./auto.sh <target>
script and follow the prompts.
If you'd like to contribute to the development of WebPeas, please feel free to fork the repository and submit a pull request with your changes. All contributions are welcome and appreciated.