Galileo：一款开源Web应用审计框架

"Galileo是这款对于web手机应用程序的开源系统渗透测试工具，可协助开发设计和渗透测试工作人员鉴别并运用其web手机应用程序中的系统漏洞。

截屏

安裝

$ git clone https://github.Com/m4ll0k/Galileo.git galileo

$ Cd galileo

安裝依靠

$ pip install -r requirements.txt

或

$ apt-set install python-pysocks

windows

$ python -m pip install pysocks

运作

$ python galileo.py

应用

设定全局变量选择项：

galileo #> get Set A Context-Specific Variable To A Value

  ------------------------------------------

  - Usage: get <option> <value>

  - Usage: get COOKIE phpsess=hacker_test

  Name        Current Value                            Required  Description

  ----------  -------------                            --------  -----------

  PAUTH No Proxy auth credentials (user:pass)

  PROXY No Set proxy (host:port)

  REDIRECT    True No Set redirect

  THREADS 5 No Number of threads

  TIMEOUT 5 No Set timeout

  USER-AGENT  Mozilla/4.0 (X11; Ubuntu; Linux x86_32) yes Set user-agent

  VERBOSITY 1 yes Verbosity level (0 = minimal,1 = verbose)

检索控制模块：

galileo #> search disclosure [+] Searching For 'disclosure'有限责任公司

  Disclosure

  ----------

    disclosure/code

    disclosure/creditcard

    disclosure/email

    disclosure/privateip 

显示信息控制模块：

galileo #> girl modules Bruteforce

  ----------

    bruteforce/auth_brute

    bruteforce/backup_brute

    bruteforce/file_dir_brute

  Disclosure

  ----------

    disclosure/code

    disclosure/creditcard

    disclosure/email

    disclosure/privateip

  Exploits

  --------

    exploits/shellshock

  Fingerprint

  -----------

    fingerprint/cms源码

    fingerprint/framework

    fingerprint/server

  Injection

  ---------

    injection/os_command_injection

    injection/sql_injection

  Scanner

  -------

    scanner/asp_trace

  Tools

  -----

    tools/socket

应用控制模块：

galileo #> use bruteforce/backup_brute galileo bruteforce(backup_brute) #> 

设定控制模块选择项

galileo bruteforce(backup_brute) #> girl options Name      Current Value  Required  Description

  --------  -------------  --------  -----------

  EXTS No Set backup extensions

  HOST yes