What is lazyParam?

lazyParam is a simple automation tool with implementation of multi-threading created by us @aniqfakhrul, @h0j3n and @a_m1rz for checking hidden parameters in a page. This tool is still in testing phase and more implementations are soon to be made. note: Works with python3

Features

• Fuzz parameters for both GET and POST method
• Multi-threaded (Default: 4)
• Use intensive mode with characters bypassing techniques (beta)
• Check for LFI, RCE and SSTI

Todo

• XSS checking

Usage

Fuzz parameters with build in wordlists

python3 lazyparam.py -u http://example.com/file.php

Specify custom wordlist

python3 lazyparam.py -u http://example.com/file.php -w wordlists.lst