![webforce](https://cdn-0.reconshell.com/wp-content/uploads/2021/08/webforce-1024x671.png)
Installation & Usage
Requirement: python 3.7 or higher
Choose one of these installation options:
- Install with git:
git clone https://github.com/pwnsociety/WebForce.git
- Install with ZIP file: Download here
How to use
All in one:
git clone https://github.com/pwnsociety/WebForce.git
cd WebForce
python3 WebForce.py -u "https://website.com/somewhere?id=" --all
Help Command:
.--. v1.0.0 ,-.------+-.| ,-. ,--=======* )"("")===)===* ) � -"---==-+-"| -" O '--' github.com/Pwnsociety [+] Started scanning @ 12:15:39 usage: WebForce.py [-h] [-u FULL_SITE] [-a] [--xss] [--ssti] [--ignore-ssl] [--lfi] [--sqli] [--cors] [--ssi] [--crlf] [--xxe] [--open-redirect] [--parameter-pollution] [--user-agent] [--cookie-scan] [--cipher CIPHER_SCAN] [--proxy PROXY_ARG] [--redirect] [--cookies COOKIES] [--no-param] [--list] [--verbose] [--version] Example : python3 WebForce.py -u "https://website.com/somewhere?id=" --all optional arguments: -h, --help show this help message and exit -u FULL_SITE, --url FULL_SITE Target URL (e.g. "http://www.site.com/vuln.php?id=1") -a, --all Scan for every possible vulnerability --xss Scan only for XSS --ssti Scan only for SSTI injection --ignore-ssl Ignore SSL errors while scanning --lfi Scan only for LFI injection --sqli Scan only for SQL injection --cors Scan only for CORS vulnerability --ssi Scan only for SSI injection --crlf Scan only for CRLF injection --xxe Fast recon for XXE --open-redirect Scan only for Open Redirect vulnerability --parameter-pollution Scan only for HTTP Parameter pollution vulnerabilities --user-agent Scan only for every possible User-Agent HTTP Header vulnerability --cookie-scan Detect possible vulnerabilities by deciphering the cookie value --cipher CIPHER_SCAN Detect possible vulnerabilities by deciphering the cookie value --proxy PROXY_ARG Scan using proxy (e.g "127.0.0.1:8080") --redirect Allow redirecting when sending request --cookies COOKIES Specify cookies (in JSON format) --no-param Dont specify GET parameters on URL --list List all vulnerabilities that this scanner is able to do --verbose Enable real-time scan information --version show program's version number and exit
Leave a Reply