• -p, --proxyPROXY_URL
The given URL will be used as a proxy for HTTP and HTTPS requests.
This URL can have one of the following scheme : http, https, socks.
To make Wapiti use a Tor listener you can use --proxy socks://127.0.0.1:9050/
• --tor
Make Wapiti use a Tor listener (same as --proxy socks://127.0.0.1:9050/)
• -a, --auth-credCREDENTIALS
Set credentials to use for HTTP authentication on the target.
Given value should be in the form login%password (% is used as a separator)
• --auth-typeTYPE
Set the authentication mechanism to use. Valid choices are basic, digest, kerberos and ntlm.
Kerberos and NTLM authentication may require you to install additional Python modules.
• -H, --headerHEADER
Set a custom HTTM header to inject in every request sent by Wapiti. This option can be used several
times.
Value should be a standard HTTP header line (parameter and value separated with a : sign).
• -A, --user-agentAGENT
Default behavior of Wapiti is to use the same User-Agent as the TorBrowser, making it discreet when
crawling standard website or .onion ones.
But you may have to change it to bypass some restrictions so this option is here.
• -d, --dataDATA
wapiti-getcookie will parse forms and ask your input for each field found.
But you can also pass every parameter and value as a string directly through this option.
Example: -d ´login=admin&password=letmein&submit=Login´