affilares / 0x94tr Goto Github PK

0x94TR Scanner Burp Suite Extension Python 2x

Operations occur on a direct query without any parameter target input..

Potential security weaknesses are reflected on The Burp screen, It has a payload list in itself, finds vulnerabilities by doing bruteforce..

Features: What vulnerabilities can it find ?

• GET-POST Error Based SQL Injection
• GET-POST Blind SQL Injection
• GET-POST Time Based SQL Injection
• GET-POST Boolean Based SQL Injection
• GET-POST Union Based SQL Injection
• GET-POST Remote Command Execution
• GET-POST PHP exec
• GET-POST Local File Include
• Header CRLF Injection
• GET-POST Command Injection
• GET-POST Open Redirect
• GET-POST Cross-Site Scripting(XSS)
• GET-POST LDAP Injection
• GET-POST Xpath Injection
• GET-POST Frame Injection
• GET-POST SSI Injection
• GET-POST Template Injection
• HTTP Response Splitting
• Blind Command Injection
• Blind Remote Command Injection
• Blind XPATH Injection
• Header(Cookie/UserAgent/Referer/Accept-Language/Accept-Encoding/Accept-Charset) Injection
• Expression Language Injection
• XXE Injection
• Directory Brute
• File Brute
• Default password Brute

How does he find it ?

It automatically detects GET or POST requests, by browsing the target site and tries payload based on returning errors.

watch the video