FUSE is a penetration testing system which is designed to detect Unlimitedrecut Executable File Upload (UEFU) vulnerabilities. The details of the testing strategy are available at σελίδα us.
Installation
# apt-get install rabbitmq-server # apt-get install python-pip # apt-get install git
Use
Configuration
FUSE uses one file configuration set is user-supplied and specifies parameters for a PHP application. The script must be completed before testing a Web application. You can see it archive README and examples of configuration files .
Configuration for file tracking (optional)
Implementation
FUSE
$python framework.py [Path of configuration files]
File tracking
$ python filemonitor.py
Result
- When FUSE completes the penetration test, a [HOST] directory and a [HOST_report.txt] directory are created.
- A envelope [HOST] saves files that have been uploaded.
- [HOST_report.txt] file contains test results and information related to U (E) FU-enabled files.
You can find the program here.
