https://github.com/9dl/websploit
Advanced reconnaissance tool for identifying web vulnerabilities through crowd-sourced data collection
https://github.com/9dl/websploit
cybersecurity exploit poc proof-of-concept vulnerable
Last synced: 3 months ago
JSON representation
Advanced reconnaissance tool for identifying web vulnerabilities through crowd-sourced data collection
- Host: GitHub
- URL: https://github.com/9dl/websploit
- Owner: 9dl
- Created: 2023-11-21T13:20:19.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2025-02-14T13:11:17.000Z (over 1 year ago)
- Last Synced: 2026-01-16T21:39:44.212Z (5 months ago)
- Topics: cybersecurity, exploit, poc, proof-of-concept, vulnerable
- Language: NSIS
- Homepage:
- Size: 372 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
> Improved & Updated Version on https://github.com/Axion-Security
# Websploit
A new exploit that could be used to gather links that are Vulnerable by using **RATTED** Users and using a Server scanning these Links with SQLMap (SQLI) or other Scanners like LFI.
## How it works
When someone uses the Browser Extension, it sends all links to a WebSocket.
With these links, you can create a comprehensive database, filter out known sites, and scan sites for vulnerabilities such as LFI, SQLI, and more. These sites could be used for Database Attacks and much more.
## FAQ
#### How to protect against it?
Keep your Server up to date and search about how to prevent it:
- https://brightsec.com/blog/sql-injection-attack/
- https://brightsec.com/blog/lfi-attack-real-life-attacks-and-attack-examples/
## Tech Stack
**Client:** JS (Chrome Extension)
**Server:** Golang
## Info
- Websploit RAT => Server
- Websploit Extensions => Client (only Chromium Browsers Supported | Tested on: Brave/Chrome)
- Websploit UI => Server and Client (isnt working but was for Testing with UI)
This Project was coded Poorly and isnt Completed (Half done)
## Authors
- [@FaxHack](https://github.com/Faxhack) - Tester
## PoC Notice
This repository is a Proof of Concept (PoC) and is not intended for use in production environments. The provided content is for demonstration purposes only and may lack completeness. Users are cautioned to use it with care, and the creators make no warranties regarding its accuracy or reliability.
By accessing this repository, you acknowledge the experimental nature of the PoC and agree to use it at your own risk. The creators are not liable for any damages arising from its use. If you do not agree with these terms, refrain from using the PoC.