Vulnx : An Intelligent Bot Auto Shell Injector That Detect Vulnerabilities In Multiple Types Of CMS

Vulnx is An Intelligent Bot Auto Shell Injector that detect vulnerabilities in multiple types of Cms, fast cms detection,informations gathering and vulnerabilitie Scanning of the target like subdomains, ipaddresses, country, org, timezone, region, ans and more.

Instead of injecting each and every shell manually like all the other tools do, it analyses the target website checking the presence of a vulnerabilitie if so the shell will be Injected.searching urls with dorks Tool.

Features

  • Detect cms (wordpress, joomla, prestashop, drupal, opencart, magento, lokomedia)
  • Target informations gatherings
  • Target Subdomains gathering
  • Multi-threading on demand
  • Checks for vulnerabilities
  • Auto shell injector
  • Exploit dork searcher
  • Ports Scan High Level
  • Dns-Servers Dump
  • Input multiple target to scan.
  • Dorks Listing by Name& by ExploitName.
  • Export multiple target from Dorks into a logfile.

Also Read – Windows Hacks : Creative & Unusual Things That Can Be Done With The Windows API

DNS-Map-Results

To do this,run a scan with the –dns flag and -d for subdomains. To generate a map of isetso.rnu.tn, you can run the command vulnx -u isetso.rnu.tn --dns -d --output $PATHin a new terminal.

$PATH : Where the graphs results will be stored.

Let’s generates an image displaying target Subdomains,MX & DNS data.

Exploits

Joomla
WordPress
Drupal
PrestaShop
Opencart

Available command line options

usage: vulnx [options]

-u –url url target
-D –dorks search webs with dorks
-o –output specify output directory
-t –timeout http requests timeout
-c –cms-info search cms info[themes,plugins,user,version..]
-e –exploit searching vulnerability & run exploits
-w –web-info web informations gathering
-d –domain-info subdomains informations gathering
-l, –dork-list list names of dorks exploits
-n, –number-page number page of search engine(Google)
-p, –ports ports to scan
-i, –input specify domains to scan from an input file
–threads number of threads
–dns dns informations gathering

Docker

$ git clone https://github.com/anouarbensaad/VulnX.git
$ cd VulnX
$ docker build -t vulnx ./docker/
$ docker run -it –name vulnx vulnx:latest -u http://exemple.com

run vulnx container in interactive mode

to view logfiles mount it in a volume like so:

$ docker run -it –name vulnx -v “$PWD/logs:/VulnX/logs” vulnx:latest -u http://exemple.com

change the mounting directory..

VOLUME [ “$PATH” ]

Install vulnx on Ubuntu

$ git clone https://github.com/anouarbensaad/vulnx.git
$ cd VulnX
$ chmod +x install.sh
$ ./install.sh

Now run vulnx

Install On Termux

$ pkg update $ pkg install -y git
$ git clone http://github.com/anouarbensaad/vulnx
$ cd vulnx
$ chmod +x install.sh
$ ./install.sh

Install In Windows

  • click here to download vulnx
  • download and install python3
  • unzip vulnx-master.zip in c:/
  • open the command prompt cmd.

> cd c:/vulnx-master
> python vulnx.py


example command with options : settimeout=3 , cms-gathering = all , -d subdomains-gathering , run –exploits

vulnx -u http://example.com –timeout 3 -c all -d -w –exploit

example command for searching dorks : -D or –dorks , -l –list-dorks

vulnx --list-dorks return table of exploits name. vulnx -D blaze return urls found with blaze dork

R K

Recent Posts

garak, LLM Vulnerability Scanner : The Comprehensive Tool For Assessing Language Model Security

garak checks if an LLM can be made to fail in a way we don't…

2 days ago

Vermilion : Mastering Linux Post-Exploitation For Red Team Success

Vermilion is a simple and lightweight CLI tool designed for rapid collection, and optional exfiltration…

2 days ago

AD-CS-Forest-Exploiter : Mastering Security Through PowerShell For AD CS Misconfiguration

ADCFFS is a PowerShell script that can be used to exploit the AD CS container…

2 days ago

Usage Of Tartufo – A Comprehensive Guide To Securing Your Git Repositories

Tartufo will, by default, scan the entire history of a git repository for any text…

2 days ago

Loco : A Rails-Inspired Framework For Rust Developers

Loco is strongly inspired by Rails. If you know Rails and Rust, you'll feel at…

3 days ago

Monolith : The Ultimate Tool For Storing Entire Web Pages As Single HTML Files

A data hoarder’s dream come true: bundle any web page into a single HTML file.…

3 days ago