Skip to main content

Tool For Fuzz Web Applications

Project description

Saker logo

Python 3.6

Saker is a tool for fuzz Web Applications. It can be used to penetrate website, fuzz some vulnerabilities, brute password and dirs.

This project is for research and study only, do not use Saker for unauthorized penetration testing.

Install

pip install -r requirements.txt
git clone https://github.com/LyleMi/Saker.git
python setup.py install

or by pip

pip install Saker

Features

Scan Website

>>> from saker.core.scaner import Saker
>>> s = Saker("http://127.0.0.1")
>>> s.scan(filename="index.php", ext="php")

or by shell

python -m saker

usage: main.py [options]
Tool For Fuzz Web Applications

optional arguments:
  -h, --help            show this help message and exit
  -s, --scan            run with list model
  -f file, --file file  scan specific file
  -e ext, --ext ext     scan specific ext
  -i, --interactive     run with interactive model
  -u URL, --url URL     define specific url
  -p PROXY, --proxy PROXY
                        proxy url
  -t INTERVAL, --timeinterval INTERVAL
                        scan time interval, random sleep by default

Generate fuzz payload

>>> from saker.fuzzer.code import Code
>>> payload = Code.fuzzErrorUnicode(payload)

Brute password or others

>>> from saker.brute.dir import DirBrute
>>> dirBrute = DirBrute("php", "index.php")
>>> paths = dirBrute.weakfiles()

now support brute http basic auth, ftp, mysql, ssh, telnet, zipfile...

Call Some API

>>> from saker.api.dnsdumper import DNSdumpster
>>> DNSdumpster("github.com")

Handle HTML

>>> from saker.handler.htmlhandler import HTMLHandler
>>> h = HTMLHandler("<html><head><title>title</title></head><body></body></html>")
>>> print(h.title)

Port Scanner

>>> from saker.port.nmap import Nmap
>>> n = Nmap(domain)
>>> ret = n.run()
>>> print(n.ret)

TODO

  • FingerPrint
  • AutoTest

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

Saker-1.0.5.tar.gz (41.3 kB view details)

Uploaded Source

File details

Details for the file Saker-1.0.5.tar.gz.

File metadata

  • Download URL: Saker-1.0.5.tar.gz
  • Upload date:
  • Size: 41.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.13.0 pkginfo/1.5.0.1 requests/2.18.4 setuptools/40.6.3 requests-toolbelt/0.9.1 tqdm/4.30.0 CPython/3.6.5

File hashes

Hashes for Saker-1.0.5.tar.gz
Algorithm Hash digest
SHA256 a795e6abfcee3098578dd51bbb3981ba6880474c251e01e76a3130cec4323a63
MD5 b32fa5b6a934b9d15dd4f12899f53cfc
BLAKE2b-256 b2dbc15634360f2324889398a6477001c04de2a781968389ba7d8ce5e933b91c

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page