Skip to content

A simple automation tool to detect LFI, RCE and SSTI vulnerabilities.

Notifications You must be signed in to change notification settings

TargetPackage/lazyParam

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

30 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

What is lazyParam?

lazyParam is a simple automation tool with the implementation of multi-threading to check for hidden parameters. This tool is still in testing phase and more implementations are soon to be made. note: Works with python3

Features

  • Fuzz parameters for both GET and POST method
  • Multi-threaded (Default: 4)
  • Use intensive mode with character bypassing techniques
  • Check for LFI, RCE and SSTI

Todo

  • XSS checking
  • Add examples to prove effectiveness

Usage

Fuzz parameters with build-in wordlists:

python3 lazyparam.py -u http://example.com/file.php

Specify custom wordlists:

python3 lazyparam.py -u http://example.com/file.php -w wordlists.lst

About

A simple automation tool to detect LFI, RCE and SSTI vulnerabilities.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%