Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws.
This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any malicious file on the desired web server.
You will need Python 3.6 at least.
git clone https://github.com/almandin/fuxploider.git
cd fuxploider
pip3 install -r requirements.txt
If you have problems with pip (and if you use windows apparently) :
python3 -m pip install -r requirements.txt
For Docker installation
# Build the docker image
docker build -t almandin/fuxploider .
To get a list of basic options and switches use :
python3 fuxploider.py -h
Basic example :
python3 fuxploider.py --url https://awesomeFileUploadService.com --not-regex "wrong file type"
Introduction to the Model Context Protocol (MCP) The Model Context Protocol (MCP) is an open…
While file extensions in Linux are optional and often misleading, the file command helps decode what a…
The touch command is one of the quickest ways to create new empty files or update timestamps…
Handling large numbers of files is routine for Linux users, and that’s where the find command shines.…
Managing files and directories is foundational for Linux workflows, and the mv (“move”) command makes it easy…
Creating directories is one of the earliest skills you'll use on a Linux system. The mkdir (make…