Hands-On Web Penetration Testing with Metasploit

WMAP configuration

You have learned how to automatically add targets into WMAP in the data reconnaissance phase. There's another way to load data into WMAP, and that is by manually defining the targets:

1. Let's start by creating a new site or a workspace to perform our scan. Let's look at all the options available to us for site creation. Type wmap_sites -h:

2. Let's now add the sites. There are two ways of adding sites – one is by going directly through the URL or IP. This can be done using the following command:

wmap_sites -a 151.101.21.32

The following screenshot shows the output of the preceding command:

3. The second way is by using virtual ...