WAVA will dynamically analyze the web application, searching for multiple vulnerabilities including XSS and SQL injection. It can be used to perform scanning for web application vulnerabilities, and to perform penetration testing against the identified subjects. WAVA可以动态分析Web应用程序,搜索包括跨站脚本和SQL注入的漏洞,同时扫描Web应用安全漏洞,并以针对所确定的主题进行渗透测试。
WAVA is an automated web application vulnerability assessment tool, designed to discern security holes in a web applications that a hacker would possibly exploit to gain unauthorized access to systems and data. 它是一种用于辨别黑客有可能利用未经授权访问系统和数据的Web安全漏洞,并自动评估Web应用程序脆弱性的工具。