Tool of the day

Uniscan is a simple Remote File Include, Local File Include and Remote Command Execution vulnerability scanner.

Installation

• Sudo apt install uniscan
• Uniscan -h

 Options

•   -h      help
•   -u       example: https://www.example.com/
•   -f       list of url's
•   -b      Uniscan go to background
•   -q      Enable Directory checks
•   -w      Enable File checks
•   -e      Enable robots.txt and sitemap.xml check
•   -d      Enable Dynamic checks
•   -s      Enable Static checks
•   -r      Enable Stress checks
•   -i       Bing search
•   -o       Google search
•   -g      Web fingerprint
•   -j      Server fingerprint

 

Usage

[1] perl ./uniscan.pl -u http://www.example.com/ -qweds

[2] perl ./uniscan.pl -f sites.txt -bqweds

[3] perl ./uniscan.pl -i uniscan

[4] perl ./uniscan.pl -i "ip:xxx.xxx.xxx.xxx"

[5] perl ./uniscan.pl -o "inurl:test"

[6] perl ./uniscan.pl -u https://www.example.com/ -r

References

• https://tools.kali.org/web-applications/uniscan