Pentest Tools

Published on February 19th, 2016 📆 | 7464 Views ⚑

0

PyScan-Scanner – Vulnerability Scanner With Custom Payload


iSpeech
REQUIRE

  • urllib2
  • BeautifulSoup
  • requests

[adsense size='1']
START

  • Change database information
$bdd = new PDO('mysql:host=localhost;dbname=pyscan', 'user', 'password');
  • Update a Python gate
panel_url = "https://localhost/pyscan/"
gate_scraper = "cmd/gate.php"
gate_scanner = "cmd/scan.php"
gate_vuln = "cmd/vuln.php"
gate_payload = "panel/api/payload.php"
gate_database = "panel/api/database.php"

Upload the .SQL

mysql -u username -p database_name < file.sql

[adsense size='4']
Login

Username: root
password: toor

Make payload !

Test payload





python pyscan.py -u "https://exemple.com/id=2" -s -p PAYLOAD_ID

Test all payload

python pyscan.py -u "https://exemple.com/id=2" -s --all

Import mass link

Test all link

python pyscan.py --database

[adsense size='3']

Download Pyscan-Scanner



Comments are closed.