{ "info": { "author": "Alexandre ZANNI", "author_email": "alexandre.zanni@openmailbox.org", "bugtrack_url": null, "classifiers": [ "Development Status :: 5 - Production/Stable", "Environment :: Other Environment", "Intended Audience :: Developers", "License :: OSI Approved :: GNU General Public License v3 (GPLv3)", "Operating System :: OS Independent", "Programming Language :: Python", "Programming Language :: Python :: 3", "Topic :: Security" ], "description": "# LFI URL Encoding\n\nA tool to encode URLs for LFI vulnerability.\n\n**Note**: this tool does not intend to encode all ASCII or UTF-8 characters but only those which are usefull for LFI testing.\n\n## Requirements\n\nThis software was designed for Python 3, it mays work under Python 2.\n\nThis software was tested with Python 3.4.1 and 3.5.2.\n\nThis software uses those python libraries:\n- [argparse](https://docs.python.org/3/library/argparse.html)\n\n## Usage\n\n```\nusage: LFI-encoding.py [-h] (-s | -d ) [-a] [-n]\n\nLFI-encoding - Encoding url for LFI\n\noptional arguments:\n -h, --help show this help message and exit\n -s , --simple \n Simple encoding\n -d , --double \n Double encoding\n -a, --advanced Advanced encoding ('&', '+', '=')\n -n, --null_byte Append a null byte\n```\n\n## Examples\n\nSimple encoding:\n```\n./LFI-encoding.py -s ../../../../etc/passwd\n%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2Fetc%2Fpasswd\n```\n\nDouble encoding:\n```\n./LFI-encoding.py -d ../../../../etc/passwd\n%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252Fetc%252Fpasswd\n```\n\nNull byte:\n```\n./LFI-encoding.py -s ../../etc/passwd -n\n%2E%2E%2F%2E%2E%2Fetc%2Fpasswd%00\n```\n\nAdvanced encoding vs normal:\n```\n./LFI-encoding.py -s 'context=config&file=conf.inc.php~' -a\ncontext%3Dconfig%26file%3Dconf%2Einc%2Ephp%7E\n\n./LFI-encoding.py -s 'context=config&file=conf.inc.php~'\ncontext=config&file=conf%2Einc%2Ephp~\n```\n\n## Install\n\n- **Online**: run `pip install lfi_url_encoding`\n- **Offline**:\n + Download [the archive](https://pypi.python.org/pypi?:action=display&name=lfi_url_encoding&version=1.0)\n + Unpack the archive\n + Go into the folder and run `python setup.py install`\n", "description_content_type": null, "docs_url": null, "download_url": "UNKNOWN", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/noraj1337/CTF-tools/tree/master/Web/lfi_url_encoding", "keywords": "encoding,LFI,URL", "license": "GNU General Public License v3.0", "maintainer": null, "maintainer_email": null, "name": "lfi_url_encoding", "package_url": "https://pypi.org/project/lfi_url_encoding/", "platform": "UNKNOWN", "project_url": "https://pypi.org/project/lfi_url_encoding/", "project_urls": { "Download": "UNKNOWN", "Homepage": "https://github.com/noraj1337/CTF-tools/tree/master/Web/lfi_url_encoding" }, "release_url": "https://pypi.org/project/lfi_url_encoding/1.0.1/", "requires_dist": null, "requires_python": null, "summary": "A tool to encode URLs for LFI vulnerability.", "version": "1.0.1" }, "last_serial": 2247739, "releases": { "1.0": [ { "comment_text": "", "digests": { "md5": "e666712fb8483fda6c55e48d71dfede9", "sha256": "deb73b5a88c5787a14089bdd4a97af6e715a4ff10cf7a14214d4be4cc9e50bff" }, "downloads": -1, "filename": "lfi_url_encoding-1.0.tar.gz", "has_sig": false, "md5_digest": "e666712fb8483fda6c55e48d71dfede9", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 1824, "upload_time": "2016-07-15T19:38:43", "url": "https://files.pythonhosted.org/packages/7e/4d/653ad2bec8d28801b5d23a9876c8942cb9c0736eddc7da3256f95319de6e/lfi_url_encoding-1.0.tar.gz" } ], "1.0.1": [ { "comment_text": "", "digests": { "md5": "a8b3b6310d035f913b697ff97eff7726", "sha256": "df671c0b82648dd46a37f6380fe2950248fce0ea1939cccf3d3c4f5e7db7eae5" }, "downloads": -1, "filename": "lfi_url_encoding-1.0.1.tar.gz", "has_sig": false, "md5_digest": "a8b3b6310d035f913b697ff97eff7726", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 15598, "upload_time": "2016-07-27T21:31:22", "url": "https://files.pythonhosted.org/packages/b0/e2/61a2bd38f0732840f224fe9ca0e06c2787aabb47c82ef016691a1d01ab1c/lfi_url_encoding-1.0.1.tar.gz" } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "a8b3b6310d035f913b697ff97eff7726", "sha256": "df671c0b82648dd46a37f6380fe2950248fce0ea1939cccf3d3c4f5e7db7eae5" }, "downloads": -1, "filename": "lfi_url_encoding-1.0.1.tar.gz", "has_sig": false, "md5_digest": "a8b3b6310d035f913b697ff97eff7726", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 15598, "upload_time": "2016-07-27T21:31:22", "url": "https://files.pythonhosted.org/packages/b0/e2/61a2bd38f0732840f224fe9ca0e06c2787aabb47c82ef016691a1d01ab1c/lfi_url_encoding-1.0.1.tar.gz" } ] }