Galileo：一款開源Web應用審計框架

轉載自FreeBuf.COM

Galileo是一款針對Web應用程序的開源滲透測試工具，可幫助開發和滲透測試人員識別並利用其Web應用程序中的漏洞。

截圖

安裝

$ git clone https://github.com/m4ll0k/Galileo.git galileo $ cd galileo

安裝依賴

$ pip install -r requirements.txt

或

$ apt-get install python-pysocks

windows

$ python -m pip install pysocks

運行

$ python galileo.py

使用

設置全局選項：

galileo #> set Set A Context-Specific Variable To A Value ------------------------------------------ - Usage: set <option> <value> - Usage: set COOKIE phpsess=hacker_test Name Current Value Required Description ---------- ------------- -------- ----------- PAUTH no Proxy auth credentials (user:pass) PROXY no Set proxy (host:port) REDIRECT True no Set redirect THREADS 5 no Number of threads TIMEOUT 5 no Set timeout USER-AGENT Mozilla/5.0 (X11; Ubuntu; Linux x86_64) yes Set user-agent VERBOSITY 1 yes Verbosity level (0 = minimal,1 = verbose)

搜索模塊：

galileo #> search disclosure [+] Searching for 'disclosure'... Disclosure ---------- disclosure/code disclosure/creditcard disclosure/email disclosure/privateip 

顯示模塊：

galileo #> show modules Bruteforce ---------- bruteforce/auth_brute bruteforce/backup_brute bruteforce/file_dir_brute Disclosure ---------- disclosure/code disclosure/creditcard disclosure/email disclosure/privateip Exploits -------- exploits/shellshock Fingerprint ----------- fingerprint/cms fingerprint/framework fingerprint/server Injection --------- injection/os_command_injection injection/sql_injection Scanner ------- scanner/asp_trace Tools ----- tools/socket

使用模塊：

galileo #> use bruteforce/backup_brute galileo bruteforce(backup_brute) #> 

設置模塊選項

galileo bruteforce(backup_brute) #> show options Name Current Value Required Description -------- ------------- -------- ----------- EXTS no Set backup extensions HOST yes The target address METHOD GET no HTTP method PORT 80 no The target port URL_PATH / no The target URL path WORDLIST yes Common directory wordlist galileo bruteforce(backup_brute) #> set HOST www.xxxxxxx.com HOST => www.xxxxxxx.com galileo bruteforce(backup_brute) #> set WORDLIST /home/m4ll0k/Desktop/all.txt WORDLIST => /home/m4ll0k/Desktop/all.txt

運行：

galileo bruteforce(backup_brute) #> run

*參考來源：github，FB小編 secist 編譯，轉載自FreeBuf.COM