├── .idea ├── CrabSticks-2.0.iml ├── misc.xml ├── modules.xml ├── vcs.xml └── workspace.xml ├── crabsticks.py ├── other ├── http_status_codes.csv ├── sensitive_files └── small_log_poision ├── src ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-36.pyc │ ├── __init__.cpython-37.pyc │ ├── common.cpython-36.pyc │ ├── common.cpython-37.pyc │ ├── crab_requests.cpython-36.pyc │ ├── crab_requests.cpython-37.pyc │ ├── entry.cpython-36.pyc │ ├── entry.cpython-37.pyc │ ├── escalate.cpython-36.pyc │ ├── escalate.cpython-37.pyc │ ├── exploit_lfi.cpython-36.pyc │ ├── exploit_lfi.cpython-37.pyc │ ├── gen_payload.cpython-36.pyc │ ├── gen_payload.cpython-37.pyc │ ├── gen_payload_interface.cpython-36.pyc │ ├── gen_payload_interface.cpython-37.pyc │ ├── heuristics.cpython-36.pyc │ ├── heuristics.cpython-37.pyc │ ├── lfi_dictionary_attack.cpython-36.pyc │ ├── lfi_dictionary_attack.cpython-37.pyc │ ├── parse_html_content.cpython-36.pyc │ ├── parse_html_content.cpython-37.pyc │ ├── prints.cpython-36.pyc │ ├── prints.cpython-37.pyc │ ├── setup_url.cpython-36.pyc │ ├── setup_url.cpython-37.pyc │ ├── ssh_pwn.cpython-37.pyc │ ├── test_single.cpython-36.pyc │ └── test_single.cpython-37.pyc ├── common.py ├── crab_requests.py ├── crawl.py ├── dork.py ├── entry.py ├── enunmerate.py ├── escalate.py ├── exploit_lfi.py ├── exploit_rfi.py ├── gen_payload.py ├── gen_payload_interface.py ├── heuristics.py ├── lfi_dictionary_attack.py ├── list.py ├── log_poison.py ├── parse_html_content.py ├── prints.py ├── sess_cookie.py ├── setup_url.py ├── ssh_pwn.py └── test_single.py └── unit_test └── __init__.py /.idea/CrabSticks-2.0.iml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/.idea/CrabSticks-2.0.iml -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/.idea/misc.xml -------------------------------------------------------------------------------- /.idea/modules.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/.idea/modules.xml -------------------------------------------------------------------------------- /.idea/vcs.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/.idea/vcs.xml -------------------------------------------------------------------------------- /.idea/workspace.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/.idea/workspace.xml -------------------------------------------------------------------------------- /crabsticks.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/crabsticks.py -------------------------------------------------------------------------------- /other/http_status_codes.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/other/http_status_codes.csv -------------------------------------------------------------------------------- /other/sensitive_files: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/other/sensitive_files -------------------------------------------------------------------------------- /other/small_log_poision: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/other/small_log_poision -------------------------------------------------------------------------------- /src/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/__pycache__/__init__.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/__init__.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/common.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/common.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/common.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/common.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/crab_requests.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/crab_requests.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/crab_requests.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/crab_requests.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/entry.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/entry.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/entry.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/entry.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/escalate.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/escalate.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/escalate.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/escalate.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/exploit_lfi.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/exploit_lfi.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/exploit_lfi.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/exploit_lfi.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/gen_payload.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/gen_payload.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/gen_payload.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/gen_payload.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/gen_payload_interface.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/gen_payload_interface.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/gen_payload_interface.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/gen_payload_interface.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/heuristics.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/heuristics.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/heuristics.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/heuristics.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/lfi_dictionary_attack.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/lfi_dictionary_attack.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/lfi_dictionary_attack.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/lfi_dictionary_attack.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/parse_html_content.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/parse_html_content.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/parse_html_content.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/parse_html_content.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/prints.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/prints.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/prints.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/prints.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/setup_url.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/setup_url.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/setup_url.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/setup_url.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/ssh_pwn.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/ssh_pwn.cpython-37.pyc -------------------------------------------------------------------------------- /src/__pycache__/test_single.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/test_single.cpython-36.pyc -------------------------------------------------------------------------------- /src/__pycache__/test_single.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/__pycache__/test_single.cpython-37.pyc -------------------------------------------------------------------------------- /src/common.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/common.py -------------------------------------------------------------------------------- /src/crab_requests.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/crab_requests.py -------------------------------------------------------------------------------- /src/crawl.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/dork.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/entry.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/entry.py -------------------------------------------------------------------------------- /src/enunmerate.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/escalate.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/escalate.py -------------------------------------------------------------------------------- /src/exploit_lfi.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/exploit_lfi.py -------------------------------------------------------------------------------- /src/exploit_rfi.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/gen_payload.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/gen_payload.py -------------------------------------------------------------------------------- /src/gen_payload_interface.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/gen_payload_interface.py -------------------------------------------------------------------------------- /src/heuristics.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/heuristics.py -------------------------------------------------------------------------------- /src/lfi_dictionary_attack.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/lfi_dictionary_attack.py -------------------------------------------------------------------------------- /src/list.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/log_poison.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/parse_html_content.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/parse_html_content.py -------------------------------------------------------------------------------- /src/prints.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/prints.py -------------------------------------------------------------------------------- /src/sess_cookie.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /src/setup_url.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/setup_url.py -------------------------------------------------------------------------------- /src/ssh_pwn.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/ssh_pwn.py -------------------------------------------------------------------------------- /src/test_single.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Hack-Hut/CrabStick/HEAD/src/test_single.py -------------------------------------------------------------------------------- /unit_test/__init__.py: -------------------------------------------------------------------------------- 1 | --------------------------------------------------------------------------------