WASS

概要

WASS is a robust Model Context Protocol (MCP) server engineered to streamline and centralize web application security scanning. It provides native integration with industry-standard tools like Nikto for web server vulnerability scanning and Wapiti for comprehensive web application vulnerability assessments. The server features a RESTful HTTP interface, ensuring easy integration with MCP clients, and maintains a persistent execution history of all scans. Designed with a stateless architecture, WASS ensures reliability and resilience, making it an ideal solution for automating and managing security testing workflows.

主な機能

• MCP Protocol Support for seamless client integration
• Persistent storage of scan results and execution history
• Nikto Integration for web server vulnerability scanning
• Wapiti Integration for comprehensive web application vulnerability scanning
• RESTful HTTP transport for streamable communication
• 1 GitHub stars

ユースケース

• Automating web server vulnerability scans using Nikto
• Performing comprehensive web application security assessments with Wapiti
• Centralizing and managing the execution history of security scans for web applications