A web vulnnerability scanner
Required software:
python2.7
ruby
dig
whatweb
Required python plugins:
python-nmap
httplib
urllib
urllib2
sqlite3
argparse
json
paramiko
requests
gevent
MySQLdb
pyquery
beautifulsoup4
easywebdav
####################################################
##
##
##
##
## author : yangbh
## email :
####################################################
Usage: hammer.py [options] -u url
-u --url: url address, like http://www.leesec.com/
-h: help
Examples:
hammer.py -u http://www.leesec.com/
plugins/
├── Common
│ └── fileinclusion.py
├── Info_Collect
│ ├── crawler.py
│ ├── neighborhost.py
│ ├── portscan.py
│ ├── robots.py
│ ├── subdomain.py
│ └── whatweb.py
├── Sensitive_Info
│ ├── backupfile.py
│ ├── compressedfile.py
│ ├── probefile.py
│ └── senpath.py
├── System
│ ├── iismethod.py
│ ├── iisshort.py
│ ├── openssl.py
│ ├── phpmyadmin_null_password.py
│ └── webdav.py
├── Weak_Password
│ └── sshcrack.py
└── Web_Applications
├── bo_blog_tag_php_xss.py
├── espcms_search_inject.py
├── espcms_sql_inject.py
├── shopex_phpinfo_disclosure.py
└── wordpress_reflect_xss.py