---
name: "w3af"
section: "1"
platform: "linux"
package: "w3af-console"
version: "1.0-rc3svn3489-1"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/w3af"
---

# w3af(1)

Web Application Attack and Audit Framework

## NAME

w3af - Web Application Attack and Audit Framework

## SYNOPSIS

**w3af\_gui** \[**-h**\] \[**-p** *\<profile-name\>*\] \[**-i** *\<metasploit-path\>*\]

- **w3af\_console**

  \[**-h**\] \[**-s** *\<script-file\>*\] \[**-p** *\<profile-name\>*\] \[**-i** *\<metasploit-path\>*\]

## DESCRIPTION

w3af is a Web Application Attack and Audit Framework. The project goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend.

## SEE ALSO

[**w3af\_gui**(1)](/w3af_gui/1.md), [**w3af\_console**(1)](/w3af_console/1.md)

## User Guide

To learn more about w3af please read the w3af users guide, which is available with your installation (readme/w3afUsersGuide.pdf) and also online at http://w3af.sourceforge.net/documentation/user/w3afUsersGuide.pdf .

## BUGS

The framework is still under development and has reported bugs. To read a complete list of them, or to submit a bug, please point your browser to https://sourceforge.net/tracker/?group\_id=170274&atid=853652 .