Installation¶

WebSec-Audit runs on Debian 11/12/13, Ubuntu 20.04/22.04/24.04 and Kali Linux 2023+.

Automatic install (recommended)¶

The bundled install.sh script handles everything: APT packages, Go binaries, Ruby gems, Python packages and wordlists.

git clone https://github.com/davidalvarezp/websec-audit.git
cd websec-audit
chmod +x install.sh websec-audit.sh
sudo ./install.sh

The installer detects your architecture (amd64 / arm64) and downloads the correct pre-compiled binaries for tools not available via APT.

Manual install¶

Required (core functionality)¶

sudo apt-get install -y curl nmap

Recommended (significantly improves coverage)¶

sudo apt-get install -y \
  nikto sqlmap gobuster dirb \
  whatweb wafw00f sslscan \
  python3 python3-pip jq ruby \
  dnsutils whois wordlists

Optional tools (install individually)¶

git clone --depth 1 https://github.com/drwetter/testssl.sh.git /opt/testssl.sh
sudo ln -s /opt/testssl.sh/testssl.sh /usr/local/bin/testssl.sh

sudo gem install wpscan --no-document

# Download latest release for your arch
wget https://github.com/hahwul/dalfox/releases/latest/download/dalfox_linux_amd64.tar.gz
tar -xzf dalfox_linux_amd64.tar.gz
sudo mv dalfox /usr/local/bin/

wget https://github.com/projectdiscovery/subfinder/releases/latest/download/subfinder_linux_amd64.zip
unzip subfinder_linux_amd64.zip
sudo mv subfinder /usr/local/bin/

wget https://github.com/projectdiscovery/nuclei/releases/latest/download/nuclei_linux_amd64.zip
unzip nuclei_linux_amd64.zip
sudo mv nuclei /usr/local/bin/
nuclei -update-templates

pip3 install droopescan

Kali Linux¶

Most tools are pre-installed. Run the installer to fill any remaining gaps:

sudo ./install.sh

Verifying the installation¶

./websec-audit.sh --version

Expected output:

websec-audit v1.0.1 — davidalvarezp

The tool also performs a dependency check at the start of every scan, listing which tools are available and which are missing.

Dependency matrix¶