// cybersecurity
RELEASE CANDIDATEWPS · Debian/Kali · x86-64
WebVuln Pentester Sidekick
▲ RC
Web Vuln
Sidekick
// WVS
Web application vulnerability scanning sidekick. Powered by Nuclei web templates (XSS, SQLi, SSRF, IDOR, auth bypass, exposed panels), CVE enrichment, MITRE ATT&CK mapping, and a built-in crawler. Takes a domain, discovers endpoints, scans with web-focused Nuclei templates, enriches with NVD CVE data, outputs a pentest-ready report. CLI-native. No GUI, no Java, no enterprise price tag.
Release Candidate
WVS is in release candidate phase. Drop your email and we'll notify you the moment it's available.
Built-in Crawler
Takes a domain, recursively discovers endpoints, forms, APIs and JS references before scanning.
Nuclei Web Templates
XSS, SQLi, SSRF, IDOR, auth bypass, exposed admin panels — web-focused template set curated for pentests.
CVE Enrichment
Matches detected software versions against NVD CVE data — surfaces exploitable web component vulnerabilities.
MITRE ATT&CK Mapping
Each finding mapped to ATT&CK tactics and techniques — ready for red team reporting.
Auth Bypass Testing
Tests login endpoints, JWT handling, session fixation, and insecure direct object references automatically.
Pentest-Ready Report
Structured HTML/JSON output with CVSS scores, evidence screenshots, and remediation guidance.