The profiles in W3AF are saved configurations of plugins enabled and focused on specific objectives, frequently. These types of associations are made at the moment of initiating the process of information gathering. Using profiles allows us to enable only those plugins that are interesting against an objective, deactivating the rest.
Among the profiles, we can highlight:
- bruteforce: It allows us to obtain credentials from authentication forms through a brute-force process.
- audit_high_risk: Allows you to identify the most risky vulnerabilities, such as SQL injection and XSS.
- full_audit_manual_disc: It allows us to make a discovery manually and to explore the website in search of known vulnerabilities.
- full_audit: It allows a ...
