fimap v0.8a released

by

In: Application Scanner , Configurations checks , Exploitation , fimap , Penetration testing & Ethical Hacking , Vulnerability Scanner

14 March 2010

fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection. It’s is currently under heavy development but it’s usable.

Version 0.8 (Enemy Unknown)

  • Complete new engine which uses XML files inside the config folder.
  • Added a tiny but powerful exploit-mode plugin interface.
  • Can scan and exploit windows servers!
  • Can scan and attack more than just PHP. Just create your own XML file for new languages!
  • Can use POST variables to scan and attack.
  • Shell user will now be displayed in the fimap shell.
  • Lots of small improvments. For example you can skip now single scans\attacks with CTRL+C when they are frozen for some reason.
  • Has a colorful-mode (-C) which makes it easier to read out infos quickly (Unix only)
  • You can install trusted plugins now thru fimap (-I).
  • You can update your definition XML files thru fimap (—update-def)
  • And as usual much more which isn’t worth to mention.
JPEG - 3.7 kb

What works currently?

  • Check a Single URL, List of URLs, or Google results fully automaticly.
  • Can identify and exploit file inclusion bugs.
    • Relative\Absolute Path Handling.
    • Tries automaticly to eleminate suffixes with Nullbyte.
    • Remotefile Injection.
    • Logfile Injection. (FimapLogInjection)
  • Test and exploit multiple bugs:
    • include()
    • include_once()
    • require()
    • require_once()
  • You always define absolute pathnames in the configs. No monkey like pathes like:
    • ../etc/passwd
    • ../../etc/passwd
    • ../../../etc/passwd
    • But in cases where the server doesn’t print messages you can enable the monkey-like checking with —enable-blind!
  • Has an interactive exploit mode which...
    • ...can spawn a shell on vulnerable systems.
    • ...can spawn a reverse shell on vulnerable systems.
    • ...can do everything you have added in your payload-dict inside the config.py
  • Add your own payloads and pathes to the config.py file.
  • Has a Harvest mode which can collect URLs from a given domain for later pentesting.
  • Goto FimapHelpPage for all features.
  • Works also on windows.
  • Can handle directories in RFI mode like:
    • where Null-Byte is not possible.

      <? include ($_GET["inc"] . "/content/index.html"); ?>

<? include ($_GET["inc"] . "_lang/index.html"); ?>

  • Can use proxys (experimental).

Requirements

  • Needs: Python >= 2.4
  • Read the FAQ

More information: here

Post scriptum

Compliance Mandates

  • Application Scanner :

    PCI/DSS 6.3, SOX A12.4, GLBA 16 CFR 314.4(b) and (2), HIPAA 164.308(a)(1)(i), FISMA RA-5, SA-11, SI-2, ISO 27001/27002 12.6, 15.2.2

  • Penetration testing & Ethical Hacking :

    PCI DSS 11.3, SOX A13.3, GLBA 16 CFR Part 314.4 (c), HIPAA 164.308(a)(8), FISMA RA-5, SI-2, ISO 27001/27002 12.6, 15.2.2

  • Vulnerability Scanner :

    PCI DSS 11.2, 6.6, SOX A13.3, GLBA 16CFR Part 314.4(c), HIPAA 164.308(a)(8), FISMA RA-5, SI-2, ISO 27001-27002 12.6, 15.2.2


Related Articles

Application Scanner
Configurations checks
Exploitation
fimap
Penetration testing & Ethical Hacking
Vulnerability Scanner