Jump to content
x3uz

Fimap RFI/LFI scanner

Recommended Posts

for my first post, I shared a very useful tool for RFI / LFI :D

Examples:

1. Scan a single URL for FI errors:

 ./fimap.py -u 'http://localhost/test.php?file=bang&id=23'

2. Scan a list of URLS for FI errors:

 ./fimap.py -m -l '/tmp/urllist.txt'

3. Scan Google search results for FI errors:

./fimap.py -g -q 'inurl:include.php'

4. Harvest all links of a webpage with recurse level of 3 and

write the URLs to /tmp/urllist

./fimap.py -H -u 'http://localhost' -d 3 -w /tmp/urllist

fimap - A little tool for local and remote file inclusion auditing and exploitation. - Google Project Hosting

Link to comment
Share on other sites

can be! Personally, I'm under linux and python is installed base but this a very good tool ! ;)

I realized this, but since i do not work in python, but in other languages, ??would be useful to ad a binary version for Windows. That's why i specified. So good anyway, i'm curious to what the final version will be implemented. If you have a compiler and i do know how to compile program, that many from here can hardly wait.

Link to comment
Share on other sites

@x3uz do not doublepost

@Birkoff l-am facut eu pt windows dar la teste cand dau un simplu scan de genu fimap.exe -g -q 'argumen'

imi da eroarea: "generic.xml file not found! This file is very important!" si nu stiu cum sa-l import sau unde sa-l pun.

precizez ca sunt noob si ca am creat versiunea pentru windows cu py2exe

mai exact:

python install.py py2exe

unde install.py contine

from distutils.core import setup

import py2exe

setup(console=['fimap.py'])

iar fisirele fimap au fost puse in root unde au fost executate si comenzile

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...