phuzz
phuzz copied to clipboard
Find exploitable PHP files by parameter fuzzing and function call tracing
With results of the traces we should be able to determine which category of bug it is. A classifier needs to match function calls and parameters, then output appropriate Tags....
A "hard problem" (which may be out of scope) to solve is the issue with dynamic web apps that have a fuck tonne of dependencies and rely on a database....
Implement using http://www.howzatt.demon.co.uk/NtTrace/ or http://intellectualheaven.com/default.asp?BH=StraceNT Too much effort at the moment
A nice addition for usability would be to have a progress indicator for when large amounts of files are being scanned. Even something as simple as "X/Y Files Scanned -...