Antes de executar a varredura, precisamos primeiro adicionar a URL de um novo alvo usando o parâmetro "-a" com o comando "wmap_targets". E além disso, executar o comando "wmap_targets -p", que exibirá os alvos disponíveis.

msf > wmap_targets -h

[*] Usage: wmap_targets [options]
-h Display this help text
-c [url] Crawl website (msfcrawler)
-p Print all available targets
-r Reload targets table
-s [id] Select target for testing
-a [url] Add new target

msf > wmap_targets -a http://192.168.1.204

[*] Added target 192.168.1.204 80 0
[*] Added request /

msf > wmap_targets -p

[*] Id. Host Port SSL
[*] 1. 192.168.1.204 80
[*] Done.

Após isso, selecionamos o alvo que desejamos varrer utilizando o parâmetro "-s". Quando exibimos a lista de alvos novamente, podemos ver que há uma seta apontando para o alvo que foi selecionado.

msf > wmap_targets -s 1
msf > wmap_targets -p

[*] Id. Host Port SSL
[*] => 1. 192.168.1.204 80
[*] Done.

Usando o comando "wmap_run" iniciaremos a varredura do sistema alvo. Primeiro usamos o parâmetro "-t" para listar os módulos que serão usados para varrer o sistema remoto.

msf > wmap_run -h

[*] Usage: wmap_run [options]
-h Display this help text
-t Show all matching exploit modules
-e [profile] Launch profile test modules against all matched targets.
No profile runs all enabled modules.

msf > wmap_run -t

[*] Loaded auxiliary/scanner/http/webdav_website_content ...
[*] Loaded auxiliary/scanner/http/http_version ...
[*] Loaded auxiliary/scanner/http/webdav_scanner ...
[*] Loaded auxiliary/scanner/http/svn_scanner ...
[*] Loaded auxiliary/scanner/http/soap_xml ...
...corte...

Tudo o que resta agora é realizar a varredura contra nossa URL alvo.

msf > wmap_run -e
[*] Using ALL wmap enabled modules.
[*] Launching auxiliary/scanner/http/webdav_website_content WMAP_SERVER against 192.168.1.204:80

[*] Found file or directory in WebDAV response (192.168.1.204) http://192.168.1.204/
[*] Scanned 1 of 1 hosts (100% complete)
[*] Launching auxiliary/scanner/http/http_version WMAP_SERVER against 192.168.1.204:80
[*] 192.168.1.204 Microsoft-IIS/6.0
...corte...
[*] Scanned 1 of 1 hosts (100% complete)
[*] Launching auxiliary/scanner/http/dir_listing WMAP_DIR / against 192.168.1.204:80...
[*] Scanned 1 of 1 hosts (100% complete)