search

VainlyStrain / Vailyn

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
GNU General Public License v3.0
196 stars 25 forks source link

[2.10] Extend targeted attack feature #6

Closed VainlyStrain closed 3 years ago

VainlyStrain commented 3 years ago

In Phase 1, it is possible to do a targeted attack. If you know file.php is just above the inclusion folder, you can specify -d 1 x x to greatly reduce the attack duration.

However, if the file sits 3 levels above, Vailyn will still check level 1 and 2.

Extend the targeted attack feature with a new argument --targeted. If provided, only check the exact Phase 1 depth.

VainlyStrain commented 3 years ago

implemented in latest commit.