wtf is waes?

CPH:SEC WAES is a one-click tool that automatically scans a website for security information and saves the results into files. Instead of running multiple scanning tools one at a time against the same target, you point this tool at an IP address and let it handle the entire process. It was built mainly for people doing capture-the-flag (CTF) hacking challenges on platforms like Hack The Box, where running the same routine scans over and over gets tedious. When you launch a scan, the tool moves through four stages. It starts with firewall detection and a quick network map, then moves into deeper scanning that checks for known vulnerabilities, examines HTTP headers, and looks for cross-site scripting issues. Finally, it fuzzes the target, essentially guessing hidden web pages and directories by running through large wordlists of possibilities. Everything it discovers gets dumped into a report folder so you can review the findings. The primary users are security enthusiasts and CTF participants who want to skip the repetitive setup of tools like nmap, nikto, and dirb. For example, if you start a new Hack The Box machine at 10.10.10.130 on port 8080, you run a single command and the tool chains those scans together for you, saving the manual effort of configuring and running each one separately. One notable design choice is that the tool deliberately avoids multi-threaded scanning. The author points out that while parallel scanning might seem faster, it tends to crash or hang the target machines, especially in CTF environments. The project is also written in bash rather than Python, which the author chose as an exercise in building a solid bash project. The tool is currently aimed at CTF-style boxes but is moving toward broader online use, with features like SSL scanning and CMS detection on the roadmap.