Fawkes是用于搜索易受SQL注入攻击的目标的工具。使用Google搜索引擎执行搜索。(利用谷歌语法去搜索存在SQL注入漏洞的网站)
命令:
-q, --query - Dork that will be used in the search engine.
-r, --results - Number of results brought by the search engine.
-s, --start-page - Home page of search results.
-t, --timeout - Timeout of requests.
-v, --verbose - Enable verbosity.
Examples:
python3 fawkes.py --query 'noticias.php?id=10' --timeout 3 --verbose
python3 fawkes.py --query 'admin.php?id=1' --timeout 3 --verbose
GitHub:https://github.com/0xdutra/fawkes
本文始发于微信公众号(Khan安全团队):自动化漏洞挖掘-Fawkes
- 左青龙
- 微信扫一扫
- 右白虎
- 微信扫一扫
评论