Git Product home page Git Product logo

webpwn3r's Introduction

webpwn3r

This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7

WebPwn3r - Web Applications Security Scanner.

By Ebrahim Hegazy - @Zigoo0

Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo

Please send all your feedback and suggestions to: zigoo.blog['at']@gmail.com

How to use:

1- python scan.py

2- The tool will ask you if you want to scan URL or List of urls?

1- Enter number 1 to scan a URL

2- Enter number 2 to scan list of URL's

3- URL should be a full link with a parameters

.e.g http://localhost/rand/news.php?com=val&id=11&page=24&text=zigoo

same thing with the list of links.

Demo Video: https://www.youtube.com/watch?v=B6kDUk-ehOE

In it’s Current Public [Demo] version, WebPwn3r got below Features:

1- Scan a URL or List of URL’s

2- Detect and Exploit Remote Code Injection Vulnerabilities.

3- ~ ~ ~ Remote Command Execution Vulnerabilities.

4- ~ ~ ~ SQL Injection Vulnerabilities.

5- ~ ~ ~ Typical XSS Vulnerabilities.

6- Detect WebKnight WAF.

7- Improved Payloads to bypass Security Filters/WAF’s.

8- Finger-Print the backend Technologies.

More details: http://www.sec-down.com/wordpress/?p=373

webpwn3r's People

Contributors

zigoo0 avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

webpwn3r's Issues

flase postive

hello ebrhaim i hope you fine
when testing for sql injection u think it give me false postive as i tried to expliot it manually or with sql map but nothing working can you confirm that or the error from my side??
thank you

[SSL: UNSUPPORTED_PROTOCOL

[!] Scan URL or List of URLs? [1/2]: 1
[!] Enter the URL: https://localhost/index.php?id=12

[!] Fingerprinting the backend Technologies.
Traceback (most recent call last):
File "scan.py", line 63, in
urls_or_list()
File "scan.py", line 38, in urls_or_list
rce_func(url)
File "/home/sec/tools/web/vulnz.py", line 50, in rce_func
headers_reader(url)
File "/home/sec/tools/web/headers.py", line 33, in headers_reader
opener = urllib.urlopen(url)
File "/usr/lib/python2.7/urllib.py", line 87, in urlopen
return opener.open(url)
File "/usr/lib/python2.7/urllib.py", line 215, in open
return getattr(self, name)(url)
File "/usr/lib/python2.7/urllib.py", line 445, in open_https
h.endheaders(data)
File "/usr/lib/python2.7/httplib.py", line 1078, in endheaders
self._send_output(message_body)
File "/usr/lib/python2.7/httplib.py", line 894, in _send_output
self.send(msg)
File "/usr/lib/python2.7/httplib.py", line 856, in send
self.connect()
File "/usr/lib/python2.7/httplib.py", line 1303, in connect
server_hostname=server_hostname)
File "/usr/lib/python2.7/ssl.py", line 369, in wrap_socket
_context=self)
File "/usr/lib/python2.7/ssl.py", line 599, in init
self.do_handshake()
File "/usr/lib/python2.7/ssl.py", line 828, in do_handshake
self._sslobj.do_handshake()
IOError: [Errno socket error] [SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:727)

what is this problem? im used tools in kali so can fix this problem?

this tool no run windows 10

Hiii bro

this tool no run windows 10

see the error bro

PS C:\Users\USER\webpwn3r> python scan.py File "C:\Users\USER\webpwn3r\scan.py", line 11
print ga.green+'''
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print(ga.green+''')?
PS C:\Users\USER\webpwn3r>

SyntaxError

SyntaxError: Missing parentheses in call to 'print'. Did you mean print(ga.green+'''

error

errors :(

[!] Now Scanning for Remote Code/Command Execution
[!] Covering Linux & Windows Operating Systems
[!] Please wait ....
Traceback (most recent call last):
File "scan.py", line 42, in
urls_or_list()
File "scan.py", line 31, in urls_or_list
rce_func(url)
File "/home/h1769/webpwn3r-master/vulnz.py", line 52, in rce_func
main_function(url, payloads, check)
File "/home/h1769/webpwn3r-master/vulnz.py", line 23, in main_function
request = urllib.urlopen(bugs).readlines()
File "/usr/lib/python2.7/urllib.py", line 86, in urlopen
return opener.open(url)
File "/usr/lib/python2.7/urllib.py", line 204, in open
return self.open_unknown(fullurl, data)
File "/usr/lib/python2.7/urllib.py", line 216, in open_unknown
raise IOError, ('url error', 'unknown url type', type)
IOError: [Errno url error] unknown url type: '$%7b@print(md5(zigoo0))%7dh$%7b@print(md5(zigoo0))%7dt$%7b@print(md5(zigoo0))%7dt$%7b@print(md5(zigoo0))%7dp$%7b@print(md5(zigoo0))%7d'
root@1769:/home/h1769/webpwn3r-ma

Syntax error

When I am trying to use scan.py it says "File "scan.py", line 11 print ga.green+''' ^ SyntaxError: Missing parentheses in call to 'print'. Did you mean print(ga.green+''')?"

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.