Panoptic is a tool that searches for commonly known files through LFI vulnerabilities. Local file inclusion is a vulnerability that allows the attacker to read files that are stored locally through the web application.This happens because the code of the application does not properly sanitize the include() function. To get started, you will need Python 2.6+. Panoptic display the found file paths and it can save the actual files as well. You can download Panoptic here.
Thursday, April 25, 2013
PANOPTIC - PENETRATION TESTING TOOL FOR HUNTING LFI VULNERABILITIES
Panoptic is a tool that searches for commonly known files through LFI vulnerabilities. Local file inclusion is a vulnerability that allows the attacker to read files that are stored locally through the web application.This happens because the code of the application does not properly sanitize the include() function. To get started, you will need Python 2.6+. Panoptic display the found file paths and it can save the actual files as well. You can download Panoptic here.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment