Skip to content

Future Improvements and plans

Mach1ne edited this page Oct 6, 2024 · 1 revision
  • Implement exploit module for filter wrapper chain RCE
  • Implement discovery and exploit module for blind LFI (via filter error-based oracle)
  • Implement '--read-file' switch to get contents of arbitrary file
  • Implement '--execute-cmd' switch to execute arbitrary command, in case RCE is possible
  • Implement '-oH', to output results to a nice .html report file
  • Implement support for JSON POST parameter parsing (only partially supported now)
  • Implement target system enumeration options for maximum vulnerability utilization
Clone this wiki locally