/scant3r

ScanT3r - Web Security Scanner

Primary LanguagePythonGNU General Public License v3.0GPL-3.0

ScanT3r - Web Security Scanner


	   _____                ___________     
	  / ___/_________ _____/_  __/__  /_____
	  \__ \/ ___/ __ `/ __ \/ /   /_ </ ___/
	 ___/ / /__/ /_/ / / / / /  ___/ / /    
	/____/\___/\__,_/_/ /_/_/  /____/_/
	
	# Coded By : Khaled Nassar @knassar702

  • Detect This Vulnerables
    • Remote Code Execution
      • Linux
    • XSS Reflected
    • Template Injection
      • Jinja2
      • ERB
      • Java
      • Twig
      • Freemarker
    • SQl Injection

Screen Shot :

  • Nokia Website:
    • nokia-xss

OS Support :

  • Linux
  • Android
  • Windows

Install

  • open your terminal
  • enter this command
    $ git clone https://github.com/knassar702/scant3r 
    $ cd scant3r 
    $ python3 -m pip install -r requirements.txt
    

Andoird

  • Download Termux App
  • open termux app
  • enter this command
 $ pkg install python -y 
 $ pkg install git -y 
 $ git clone https://github.com/knassar702/scant3r
 $ cd scant3r 
 $ python3 -m pip install -r requirements.txt

Windows

  • Download python3 and install it
  • open your cmd
  • enter this command
$ python3 -m pip install -r requirements.txt

Usage :

Options:
  -h, --help          |    show this help menu
  -u URL, --url=URL   |    Target URL (e.g."http://www.target.com/vuln.php?id=1")
  --data=DATA         |    Data string to be sent through POST (e.g. "id=1")
  --list=FILE         |    Get All Urls from List..
  --threads=THR       |    Max number of concurrent HTTP(s) requests (default 10)
  --timeout=time      |    Seconds to wait before timeout connection
  --cookies=COK       |    HTTP Cookie header value (e.g. "PHPSESSID=a8d127e..")
  --encode=1          |    How Many encode the payload (default 1)

Example :

$ python3 scant3r -u 'http://localhost/dvwa/vulnerabilities/exec/' --data='ip=localhost&Submit=Submit' --cookies='PHPSESSID=safasf'

Demo : Video

Blog : Blog

Please send all your feedback and suggestions to: knassar702@gmail.com