/GuruWebScanner

An On-The-Cloud free "greybox" box scanner for various purposes.

Primary LanguagePHP

An On-The-Cloud free "greybox" box scanner for various purposes.

Scan Vulnerability • Detect WebShell/Backdoor

Key Features

  • Detect following the vulnebilities: XSS, SQLInjection, File Inclusion...
  • Detect WebShell/Backdoor

Requirements:

php 5.6.12 , mysql, Apache/2.4.16, unzip, unrar, 7z, python-mysqldb, yara, python-yara

Usage:

  • Install requirements
  • Create a database named guruWS and import import-me-first.sql
$ mysql -uUSERNAME -pPASSWORD
(mysql) CREATE database guruWS
(mysql) exit
$ mysql -uUSERNAME -pPASSWORD DATABASE < dbconfig/import-me-first.sql
  • Change user and password of mysql in config/db.cfg file
  • chmod upload directory
chmod 777 -R userProjects/
  • Run jobAllocate.py as a service
sudo python jobAllocate.py &
  • Increase the max file size for upload file as well as max size of post request in php.ini (optional)
------- /etc/php5/apache2/php.ini ------
upload_max_filesize = 200M
post_max_size = 800M

restart the httpd service

Screenshot

home page

-+-

result page

-+-

result page

Changelog

  • Not yet released

Thanks to