WASS FAQs

Question 1

What is WASS?

Accepted Answer

WASS (Web Application Security Scanner) is a Model Context Protocol (MCP) server designed for centralized management and execution of popular web application security scanners like Nikto and Wapiti.

Question 2

Which security scanners does WASS integrate?

Accepted Answer

WASS integrates Nikto for web server vulnerability scanning and Wapiti for comprehensive web application vulnerability scanning, allowing for parallel and combined security assessments.

Question 3

How does WASS manage scan results and history?

Accepted Answer

WASS features persistent storage of all scan results and execution history in an SQLite database. It also provides a dedicated 'history' tool for browsing, retrieving, and managing past scan data.

Question 4

What is the Model Context Protocol (MCP) in WASS?

Accepted Answer

The Model Context Protocol (MCP) is the underlying communication protocol that WASS uses for seamless client integration. It allows WASS to act as a centralized hub for executing and managing security tools via a RESTful HTTP transport.

Question 5

What are the primary benefits of using WASS for security testing?

Accepted Answer

WASS offers centralized control over multiple scanners, persistent storage of results, simplified execution via MCP, and a RESTful API for integration. This streamlines web application security testing and management.

WASS

WASS

主な機能

ユースケース

主な機能

ユースケース