YAWAST is an application meant to simplify initial analysis and information gathering for penetration testers and security auditors. It performs basic checks in these categories:
- TLS/SSL – Versions and cipher suites supported; common issues.
- Information Disclosure – Checks for common information leaks.
- Presence of Files or Directories – Checks for files or directories that could indicate a security issue.
- Common Vulnerabilities
- Missing Security Headers