punk-security / pwnspoof Goto Github PK

These are meant to be SEO friendly page names, more like:
aboutus
contactus
blog

Originally posted by @SimonGurney in #2 (comment)

We currently do not test various Python version but this should be done as part of the ci.

Currently an attack consists of random payload selection into known injection points and it would be better if we could inject more elaborate stories as attack sequences.

The banking app uses the original noise generation approach, which is too noisy

Hello, I tried
python pwnspoof.py banking --server-fqdn pwnedbank.co.uk --attack-type command_injection --server-type IIS --out iis-command-injection.log
But there are no command injection strings in log. So it doesn't work as expected.

Lots of features have been added, such as the generic app and the ability to provide a uri list.

These needs documenting out in the readme

For some reason on Windows we return to the start of line but its not right on Linux.

Need to to switch to /r not /b

As a stretch, it would be awesome if we could provide a guide using one of the free docker SaaS services to generate logs nice and easy

Running pwnSpoof fails with the following error

[root@hostpwnspoof]# python pwnspoof.py --help File "pwnspoof.py", line 176 print("{:6.2f}% ".format(y * x), end="\r", flush=True) ^ SyntaxError: invalid syntax

Please update README

Originally posted by @danieloateslee in #4 (comment)