sf

XSS Fuzzer is a elementary application written inwards manifestly HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced alongside fuzzing lists. It offers the possibility to only generate the payloads equally plain-text or to execute them within an iframe. Inside iframes, it is possible to ship GET or POST requests from the browser to arbitrary URLs using generated payloads. Why? XSS Fuzzer is a generic tool that tin lav hold out useful for multiple purposes, including: Finding novel XSS vectors, for whatsoever browser Testing XSS payloads on GET as well as POST parameters Bypassing XSS Auditors inwards the browser Bypassing spider web application firewalls Exploiting HTML whitelist features Example In lodge to fuzz, it is required to exercise placeholders, for example: The [TAG] placeholder alongside fuzzing list: img svg. The [EVENT] placeholder alongside fuzzing list: onerror onload. The...

The MemITM (Mem In The Middle) tool has been developped inward lodge to easily intercept "messages" inward Windows processes memory. We developped a lot of custom retention interception tools inward lodge to capture network messages earlier encryption, or IPC messages, too to survive able to inspect them or alter them to produce about fuzzing. Each tool was actually custom, non generic, implemented inward C/ASM too was non tardily to use/maintain/adapt. The MemITM tool has been developped inward lodge to address these problems, too consists inward : an IDA Python script, which generates a "config" file, indicating where too how the interception points convey to survive placed (relative address, how to discovery the buffer too its size, how to house the hook, etc.) ; the DLL file, which volition survive injected inward the target procedure too volition loads the config too places the hooks ; a DLL file injector, which volition charge the DLL inward the targ...

The Mutiny Fuzzing Framework is a network fuzzer that operates yesteryear replaying PCAPs through a mutational fuzzer. The destination is to start network fuzzing every bit apace every bit possible, at the expense of existence thorough. The full general workflow for Mutiny is to accept a sample of legitimate traffic, such every bit a browser request, as well as feed it into a prep script to generate a .fuzzer file. Then, Mutiny tin survive run with this .fuzzer file to generate traffic against a target host, mutating whichever packets the user would like. There are extensions that let changing how Mutiny behaves, including changing messages based on input/output, changing how Mutiny responds to network errors, as well as monitoring the target inwards a split thread. Mutiny uses Radamsa to perform mutations. The Decept Proxy is a multi-purpose network proxy that tin forrad traffic from a plaintext or TLS TCP/UDP/domain socket connexion to a plaintext or TLS TCP/UDP/d...

Influenza A virus subtype H5N1 fuzzer for whatever GET entries. Features Multi-threading on demand Fuzzing, bruteforcing GET params Find admin panels Colored output Hide results past times supply code, give-and-take numbers Proxy support Big wordlist Colored Usages Install git clone https://github.com/ManhNho/brutality.git chmod 755 -R brutality/ cd brutality/ pip install -r requirements.txt Helps python brutality -h Examples Use default wordlist alongside v threads (-t 5) in addition to cover 404 messages (–e 404) to fuzz the given URL ( http://192.168.1.1/FUZZ ): python brutality.py -u 'http://192.168.1.1/FUZZ' -t v -e 404 Use common_pass.txt wordlist (-f ./wordlist/common_pass.txt), take away reply alongside 6969 length (-r 6969) in addition to proxy at 127.0.0.1:8080 (-p http://127.0.0.1:8080 ) to fuzz the given URL ( http://192.168.1.1/brute.php?username=admin&password=FUZZ&submit=submit# ): python brutality.py -u 'http://...

Warning Completely re-writing this correct now. Focus volition live on on interactive Linux apps that entirely accept input from stdin for starters. Attempting to usage Shellphish's Driller in addition to Fuzzer functionality. autoPwn inwards it's electrical flow country volition practise this inwards express form. Simply run autoPwn ./binary in addition to then choose the Start option. Installing Given all the dependency issues here, the easiest means to larn autoPwn upwardly in addition to running is to usage the Docker build. Note, yous tin take the --security-opt in addition to --cap-add statement, but about fuzzing aspects mightiness non work. $ sudo docker push clit bannsec/autoPwn $ sudo docker run -it -v $PWD:/mount --security-opt="apparmor=unconfined" --cap-add=SYS_PTRACE bannsec/autoPwn In the Docker build, everything should live on gear upwardly to go. You tin but start upwardly the tool with: $ autoPwn ./file Compiling source for fuz...