Added Vailyn Tool in new Category

Added `Vailyn` (https://github.com/VainlyStrain/Vailyn) to a new Offensive category: **LFI & Path Traversal**

Vailyn is a tool to find Path Traversal & LFI vulnerabilities, and to exploit them. It uses a number of evasive payloads & techniques, and covers multiple attack vectors (query, path, cookie, POST data). Also, it provides a crawler for automation, a possibility to give an authentication cookie if needed, and a GUI for easy interaction. To improve performance, it detects the vulnerability in a first phase, and only uses confirmed working payloads in the exploitation phase (instead of using every combination with every file path).

In general, the tool should be production ready, however, only the newer reverse shell module is still in testing phase.

In case it doesn't meet the quality standards, I'd highly value your feedback. I'd be glad to improve it in any way I can :)
pull/71/head
VainlyStrain 2020-09-01 23:48:26 +02:00 committed by GitHub
parent 3ae01489bb
commit 15c2d55319
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions

View File

@ -98,6 +98,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [XXE](#tools-xxe)
- [CSRF](#tools-csrf)
- [SSRF](#tools-ssrf)
- [LFI & Path Traversal](#tools-lfi)
- [Detecting](#tools-detecting)
- [Preventing](#tools-preventing)
- [Proxy](#tools-proxy)
@ -705,6 +706,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
- [Open redirect/SSRF payload generator](https://tools.intigriti.io/redirector/) - Open redirect/SSRF payload generator by [intigriti](https://www.intigriti.com/).
<a name="tools-lfi"></a>
#### Path Traversal & Local File Inclusion
- [Vailyn](https://github.com/VainlyStrain/Vailyn) - Evasive Path Traversal Detection and Exploitation Tool with Many Attack Vectors by [VainlyStrain](https://github.com/VainlyStrain)
<a name="tools-leaking"></a>
### Leaking