Vulmap – Web Vulnerability Scanning And Verification Tools
Vulnerability Scanning is the process of testing the target domain for various vulnerabilities in Web containers, Web servers, Web middleware, and CMS, and other Web programs, and has vulnerability exploitation functions. Testing each CVE against the target domain manually is not possible as manual testing takes a lot of time. So automated testing is the approach through which we can test the different CVEs against the target domain more quickly. Vulmap is an automated script developed in the Python Language which tests for various CVEs against the target domain. Vulmap is open-source and free to use the tool. Vulmap supports the testing of multiple target domains parallelly. Vulmap supports saving the results in the text and JSON format for further uses.
Note: Make Sure You have Python Installed on your System, as this is a python-based tool. Click to check the Installation process Python Installation Steps on Linux
Installation of Vulmap Tool on Kali Linux OS
Step 1: Use the following command to install the tool in your Kali Linux operating system.
git clone https://github.com/zhzyker/vulmap.git
Step 2: Now use the following command to move into the directory of the tool. You have to move in the directory in order to run the tool.
Step 3: You are in the directory of the Vulmap. Now you have to install a dependency of the Vulmap using the following command.
sudo pip3 install -r requirements.txt
Step 4: All the dependencies have been installed in your Kali Linux operating system. Now use the following command to run the tool and check the help section.
python3 vulmap.py -h
Working with Vulmap Tool on Kali Linux OS
Example 1: Test all vulnerabilities poc mode.
In this example, We are testing some common vulnerabilities against the target domain geeksforgeeks.org.
python3 vulmap.py -u http://geeksforgeeks.org
Example 2: Display the list of supported vulnerabilities
In this example, We are displaying the list of available vulnerabilities.
python3 vulmap.py --list
Example 3: Check target domain for struts2 vuln
In this example, We are testing struts2 vulnerability against the geeksforgeeks.org domain.
python3 vulmap.py -u http://geeksforgeeks.org -a struts2
Example 4: Batch scan URLs in list.txt
In this example, We are testing a list of multiple targets at the same time.
python3 vulmap.py -f targets.txt
Example 5: Export scan results to result.txt
In this example, We are saving the results in text file format.
python3 vulmap.py -u http://facebook.com --output-text result.txt