fimap RFI & LFI Scanner - Exploitation Tool
fimap is a little python tool which
can find, prepare, audit, exploit
and even google automaticly for local and remote file inclusion bugs in
webapps. fimap should be something like sqlmap just for LFI/RFI bugs
instead of sql injection. It's currently under heavy development but
it's usable.
Features:
- Check a Single URL, List of URLs, or Google results fully automaticly.
- Can identify and exploit file inclusion bugs.
- Has a Blind Mode (--enable-blind) for cases when the server has disabled error messages. BlindMode
- Add your own payloads and pathes to the config.py file.
- Has a Harvest mode which can collect URLs from a given domain for later pentesting.
- Goto FimapHelpPage for all features.
- Works also on windows.
- Can use proxys.
- Scans and exploits GET, POST and Cookies.
- Has a very small footprint. (No senseless bruteforcing of pathes - unless you need it.)
Previous Article
Subscribe to:
Post Comments (Atom)
Share your views...
0 Respones to "fimap RFI & LFI Scanner - Exploitation Tool"
Post a Comment